Published: 09/04/2017 Updated: 03/10/2019

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

The OJPEGReadHeaderInfoSecTablesDcTable function in tif_ojpeg.c in LibTIFF 4.0.7 allows remote malicious users to cause a denial of service (memory leak) via a crafted image.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libtiff libtiff 4.0.7

LibTIFF could be made to crash or run programs as your login if it opened a specially crafted file ...

Debian Bug report logs - #859998 tiff: CVE-2017-7592 Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 10 Apr 2017 06:18:02 UTC Severity: important Tags: fixed-upstream, security, upstream Found in version tiff/4 ...

Debian Bug report logs - #860000 tiff: CVE-2017-7593 Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 10 Apr 2017 06:21:05 UTC Severity: important Tags: fixed-upstream, security, upstream Found in version tiff/4 ...

Debian Bug report logs - #860003 tiff: CVE-2017-7595 Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 10 Apr 2017 06:45:02 UTC Severity: important Tags: security, upstream Found in version tiff/407-5 Fixed in v ...

Debian Bug report logs - #860001 tiff: CVE-2017-7594 Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 10 Apr 2017 06:21:07 UTC Severity: important Tags: fixed-upstream, security, upstream Found in version tiff/4 ...

The OJPEGReadHeaderInfoSecTablesDcTable function in tif_ojpegc in LibTIFF 407 allows remote attackers to cause a denial of service (memory leak) via a crafted image ...

A security issue has been found in libtiff < 407, where a crafted tiff image can cause a memory leak in OJPEGReadHeaderInfoSecTablesAcTable() ...

CWE-772 http://bugzilla.maptools.org/show_bug.cgi?id=2659 http://www.securityfocus.com/bid/97503 https://security.gentoo.org/glsa/201709-27 http://www.debian.org/security/2017/dsa-3844 https://usn.ubuntu.com/3602-1/https://nvd.nist.gov https://usn.ubuntu.com/3602-1/

CVE-2017-7594

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect