Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mj4r-rg7f-xjm2

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Out-of-bounds read in the PixarLogCleanup function in tif_pixarlog.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application by sending a crafted TIFF image to the rgb2ycbcr tool.

Out-of-bounds read in the PixarLogCleanup function in tif_pixarlog.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application by sending a crafted TIFF image to the rgb2ycbcr tool.

EPSS

Процентиль: 81%
0.02186
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 9 лет назад

Out-of-bounds read in the PixarLogCleanup function in tif_pixarlog.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application by sending a crafted TIFF image to the rgb2ycbcr tool.

redhat
около 10 лет назад

Out-of-bounds read in the PixarLogCleanup function in tif_pixarlog.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application by sending a crafted TIFF image to the rgb2ycbcr tool.

CVSS3: 6.5
nvd
больше 9 лет назад

Out-of-bounds read in the PixarLogCleanup function in tif_pixarlog.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application by sending a crafted TIFF image to the rgb2ycbcr tool.

CVSS3: 6.5
debian
больше 9 лет назад

Out-of-bounds read in the PixarLogCleanup function in tif_pixarlog.c i ...

suse-cvrf
почти 10 лет назад

Security update for tiff

EPSS

Процентиль: 81%
0.02186
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-125