Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2016-3990

Опубликовано: 12 апр. 2016
Источник: redhat
CVSS3: 5.3
CVSS2: 6.8

Описание

Heap-based buffer overflow in the horizontalDifference8 function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image to tiffcp.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5libtiffUnder investigation
Red Hat Enterprise Linux 7compat-libtiff3Under investigation
Red Hat Enterprise Linux 6libtiffFixedRHSA-2016:154702.08.2016
Red Hat Enterprise Linux 7libtiffFixedRHSA-2016:154602.08.2016

Показывать по

Дополнительная информация

Статус:

Important
Дефект:
CWE-787
https://bugzilla.redhat.com/show_bug.cgi?id=1326246libtiff: out-of-bounds write in horizontalDifference8()

5.3 Medium

CVSS3

6.8 Medium

CVSS2

Связанные уязвимости

CVSS3: 7.8
ubuntu
почти 9 лет назад

Heap-based buffer overflow in the horizontalDifference8 function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image to tiffcp.

CVSS3: 7.8
nvd
почти 9 лет назад

Heap-based buffer overflow in the horizontalDifference8 function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image to tiffcp.

CVSS3: 7.8
debian
почти 9 лет назад

Heap-based buffer overflow in the horizontalDifference8 function in ti ...

CVSS3: 7.8
github
больше 3 лет назад

Heap-based buffer overflow in the horizontalDifference8 function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image to tiffcp.

suse-cvrf
почти 9 лет назад

Security update for tiff

5.3 Medium

CVSS3

6.8 Medium

CVSS2