Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2016-3990

Опубликовано: 21 сент. 2016
Источник: debian

Описание

Heap-based buffer overflow in the horizontalDifference8 function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image to tiffcp.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
tifffixed4.0.7-1package
tiff3removedpackage

Примечания

  • src:tiff3: built binary packages do not contain the TIFF tools

  • http://bugzilla.maptools.org/show_bug.cgi?id=2544

Связанные уязвимости

CVSS3: 7.8
ubuntu
почти 9 лет назад

Heap-based buffer overflow in the horizontalDifference8 function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image to tiffcp.

CVSS3: 5.3
redhat
больше 9 лет назад

Heap-based buffer overflow in the horizontalDifference8 function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image to tiffcp.

CVSS3: 7.8
nvd
почти 9 лет назад

Heap-based buffer overflow in the horizontalDifference8 function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image to tiffcp.

CVSS3: 7.8
github
больше 3 лет назад

Heap-based buffer overflow in the horizontalDifference8 function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image to tiffcp.

suse-cvrf
почти 9 лет назад

Security update for tiff