Published: 09/04/2017 Updated: 22/03/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

tif_read.c in LibTIFF 4.0.7 does not ensure that tif_rawdata is properly initialized, which might allow remote malicious users to obtain sensitive information from process memory via a crafted image.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libtiff libtiff 4.0.7

LibTIFF could be made to crash or run programs as your login if it opened a specially crafted file ...

Debian Bug report logs - #859998 tiff: CVE-2017-7592 Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 10 Apr 2017 06:18:02 UTC Severity: important Tags: fixed-upstream, security, upstream Found in version tiff/4 ...

Debian Bug report logs - #860000 tiff: CVE-2017-7593 Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 10 Apr 2017 06:21:05 UTC Severity: important Tags: fixed-upstream, security, upstream Found in version tiff/4 ...

Debian Bug report logs - #860003 tiff: CVE-2017-7595 Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 10 Apr 2017 06:45:02 UTC Severity: important Tags: security, upstream Found in version tiff/407-5 Fixed in v ...

Debian Bug report logs - #860001 tiff: CVE-2017-7594 Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 10 Apr 2017 06:21:07 UTC Severity: important Tags: fixed-upstream, security, upstream Found in version tiff/4 ...

tif_readc in LibTIFF 407 does not ensure that tif_rawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image ...

A security issue has been found in libtiff < 407, where a crafted tiff image can cause a unitialized-memory access in tif_rawdata(), leading to information leakage ...

CWE-119 http://bugzilla.maptools.org/show_bug.cgi?id=2651 http://www.securityfocus.com/bid/97502 https://security.gentoo.org/glsa/201709-27 http://www.debian.org/security/2017/dsa-3844 https://usn.ubuntu.com/3602-1/https://nvd.nist.gov https://usn.ubuntu.com/3602-1/

CVE-2017-7593

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect