2 matches found
SUSE CVE-2006-3463
The EstimateStripByteCounts function in TIFF library libtiff before 3.8.2 uses a 16-bit unsigned short when iterating over an unsigned 32-bit value, which allows context-dependent attackers to cause a denial of service via a large tdnstrips value, which triggers an infinite loop...
7.8CVSS6.8AI score0.02781EPSS
SaveExploits1References4
PT-2017-1083
Name of the Vulnerable Software and Affected Versions libtiff version 4.0.6 Description The issue allows remote attackers to cause a denial of service via a crafted file. It is related to changing td nstrips in TIFF STRIPCHOP mode and involves an out-of-bounds read. The vulnerability can be...
7.8CVSS0.06463EPSS
SaveExploits0References247
20