Published: 09/04/2017 Updated: 22/03/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

The JPEGSetupEncode function in tiff_jpeg.c in LibTIFF 4.0.7 allows remote malicious users to cause a denial of service (divide-by-zero error and application crash) via a crafted image.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libtiff libtiff 4.0.7

LibTIFF could be made to crash or run programs as your login if it opened a specially crafted file ...

Debian Bug report logs - #859998 tiff: CVE-2017-7592 Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 10 Apr 2017 06:18:02 UTC Severity: important Tags: fixed-upstream, security, upstream Found in version tiff/4 ...

Debian Bug report logs - #860000 tiff: CVE-2017-7593 Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 10 Apr 2017 06:21:05 UTC Severity: important Tags: fixed-upstream, security, upstream Found in version tiff/4 ...

Debian Bug report logs - #860003 tiff: CVE-2017-7595 Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 10 Apr 2017 06:45:02 UTC Severity: important Tags: security, upstream Found in version tiff/407-5 Fixed in v ...

Debian Bug report logs - #860001 tiff: CVE-2017-7594 Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 10 Apr 2017 06:21:07 UTC Severity: important Tags: fixed-upstream, security, upstream Found in version tiff/4 ...

The JPEGSetupEncode function in tiff_jpegc in LibTIFF 407 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image ...

A security issue has been found in libtiff before 408, where a crafted tiff image can cause a division by zero in JPEGSetupEncode(), leading to denial of service ...

CWE-369 https://blogs.gentoo.org/ago/2017/04/01/libtiff-divide-by-zero-in-jpegsetupencode-tiff_jpeg-c http://www.securityfocus.com/bid/97501 https://security.gentoo.org/glsa/201709-27 http://www.debian.org/security/2017/dsa-3844 https://usn.ubuntu.com/3602-1/https://nvd.nist.gov https://usn.ubuntu.com/3602-1/

CVE-2017-7595

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect