6.5
CVSSv3

CVE-2018-10779

Published: 07/05/2018 Updated: 03/10/2019
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

It exists that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

libtiff libtiff 3.8.2

canonical ubuntu linux 14.04

canonical ubuntu linux 18.04

canonical ubuntu linux 16.04

canonical ubuntu linux 18.10

Vendor Advisories

Synopsis Moderate: libtiff security update Type/Severity Security Advisory: Moderate Topic An update for libtiff is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score, wh ...
Debian Bug report logs - #898359 tiff: CVE-2018-10779: TIFFWriteScanline in tif_writec has a heap-based buffer over-read Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 10 May 2018 19:06:02 UTC Severity: importa ...
LibTIFF could be made to crash or run programs as your login if it opened a specially crafted file ...
LibTIFF could be made to crash or run programs as your login if it opened a specially crafted file ...
Buffer overflow in the readextension function in gif2tiffc in LibTIFF 406 allows remote attackers to cause a denial of service (application crash) via a crafted GIF file(CVE-2016-3186) An integer overflow has been discovered in libtiff in TIFFSetupStrips:tif_writec, which could lead to a heap-based buffer overflow in TIFFWriteScanline:tif_writ ...
Buffer overflow in the readextension function in gif2tiffc in LibTIFF 406 allows remote attackers to cause a denial of service (application crash) via a crafted GIF file(CVE-2016-3186) An integer overflow has been discovered in libtiff in TIFFSetupStrips:tif_writec, which could lead to a heap-based buffer overflow in TIFFWriteScanline:tif_writ ...
An integer overflow has been discovered in libtiff in TIFFSetupStrips:tif_writec, which could lead to a heap-based buffer overflow in TIFFWriteScanline:tif_writec An attacker may use this vulnerability to corrupt memory or cause Denial of Service ...
A heap-based out-of-bounds read has been found in libtiff before 4010, in the TIFFWriteScanline() function The issue is caused by a uint32_t overflow on 32-bit systems ...