CVE-2017-2870

2017-09-05T14:29:00
ID CVE-2017-2870
Type cve
Reporter NVD
Modified 2017-09-08T16:40:25

Description

An exploitable integer overflow vulnerability exists in the tiff_image_parse functionality of Gdk-Pixbuf 2.36.6 when compiled with Clang. A specially crafted tiff file can cause a heap-overflow resulting in remote code execution. An attacker can send a file or a URL to trigger this vulnerability.