Описание
The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF image.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | libtiff | Affected | ||
| Red Hat Enterprise Linux 6 | libtiff | Fixed | RHSA-2016:1547 | 02.08.2016 |
| Red Hat Enterprise Linux 7 | libtiff | Fixed | RHSA-2016:1546 | 02.08.2016 |
Показывать по
Дополнительная информация
Статус:
5.3 Medium
CVSS3
6.8 Medium
CVSS2
Связанные уязвимости
The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF image.
The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF image.
The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attac ...
5.3 Medium
CVSS3
6.8 Medium
CVSS2