Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2016-3945
HistorySep 21, 2016 - 6:59 p.m.

CVE-2016-3945

2016-09-2118:59:00
Debian Security Bug Tracker
security-tracker.debian.org
11

0.004 Low

EPSS

Percentile

74.4%

Multiple integer overflows in the (1) cvt_by_strip and (2) cvt_by_tile functions in the tiff2rgba tool in LibTIFF 4.0.6 and earlier, when -b mode is enabled, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image, which triggers an out-of-bounds write.