Published: 09/04/2017 Updated: 22/03/2018

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 606

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote malicious users to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libtiff libtiff 4.0.7

LibTIFF could be made to crash or run programs as your login if it opened a specially crafted file ...

Debian Bug report logs - #859998 tiff: CVE-2017-7592 Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 10 Apr 2017 06:18:02 UTC Severity: important Tags: fixed-upstream, security, upstream Found in version tiff/4 ...

Debian Bug report logs - #860000 tiff: CVE-2017-7593 Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 10 Apr 2017 06:21:05 UTC Severity: important Tags: fixed-upstream, security, upstream Found in version tiff/4 ...

Debian Bug report logs - #860003 tiff: CVE-2017-7595 Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 10 Apr 2017 06:45:02 UTC Severity: important Tags: security, upstream Found in version tiff/407-5 Fixed in v ...

Debian Bug report logs - #860001 tiff: CVE-2017-7594 Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 10 Apr 2017 06:21:07 UTC Severity: important Tags: fixed-upstream, security, upstream Found in version tiff/4 ...

LibTIFF 407 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image ...

A security issue has been found in libtiff before 408, where a crafted TIFF file can trigger an undefined behavior ...

CWE-20 https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes http://www.securityfocus.com/bid/97506 https://security.gentoo.org/glsa/201709-27 http://www.debian.org/security/2017/dsa-3844 https://usn.ubuntu.com/3602-1/https://nvd.nist.gov https://usn.ubuntu.com/3602-1/

CVE-2017-7596

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect