Описание
The _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a zero size, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image that is mishandled by the TIFFWriteScanline function in tif_write.c, as demonstrated by tiffdither.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 4.0.3-12.3ubuntu1 |
| esm-infra-legacy/trusty | released | 4.0.3-7ubuntu0.2 |
| lucid | released | 3.9.2-2ubuntu0.15 |
| precise | released | 3.9.5-2ubuntu1.7 |
| trusty | released | 4.0.3-7ubuntu0.2 |
| trusty/esm | released | 4.0.3-7ubuntu0.2 |
| upstream | needs-triage | |
| utopic | released | 4.0.3-10ubuntu0.1 |
Показывать по
EPSS
4.3 Medium
CVSS2
6.5 Medium
CVSS3
Связанные уязвимости
The _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a zero size, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image that is mishandled by the TIFFWriteScanline function in tif_write.c, as demonstrated by tiffdither.
The _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a zero size, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image that is mishandled by the TIFFWriteScanline function in tif_write.c, as demonstrated by tiffdither.
The _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not rejec ...
The _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a zero size, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image that is mishandled by the TIFFWriteScanline function in tif_write.c, as demonstrated by tiffdither.
EPSS
4.3 Medium
CVSS2
6.5 Medium
CVSS3