CVE-2017-7600

2017-04-0914:59:00

Google

osv.dev

7.5 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.4%

JSON

LibTIFF 4.0.7 has an “outside the range of representable values of type unsigned char” undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.

CPENameOperatorVersion
libtiffeq3.7.1
libtiffeq4.0.0beta7
libtiffeq3.7.0beta2
libtiffeqRelease-v4-0-0alpha
libtiffeq4.0.7
libtiffeqRelease-v3-6-1
libtiffeqRelease-v3-7-0beta2
libtiffeq3.7.0
libtiffeq4.0.0alpha4
libtiffeq3.7.4

Name	Operator	Version
libtiff	eq	3.7.1
libtiff	eq	4.0.0beta7
libtiff	eq	3.7.0beta2
libtiff	eq	Release-v4-0-0alpha
libtiff	eq	4.0.7
libtiff	eq	Release-v3-6-1
libtiff	eq	Release-v3-7-0beta2
libtiff	eq	3.7.0
libtiff	eq	4.0.0alpha4
libtiff	eq	3.7.4