Lucene search

K
ubuntucveUbuntu.comUB:CVE-2016-3945
HistorySep 21, 2016 - 12:00 a.m.

CVE-2016-3945

2016-09-2100:00:00
ubuntu.com
ubuntu.com
13

0.004 Low

EPSS

Percentile

74.4%

Multiple integer overflows in the (1) cvt_by_strip and (2) cvt_by_tile
functions in the tiff2rgba tool in LibTIFF 4.0.6 and earlier, when -b mode
is enabled, allow remote attackers to cause a denial of service (crash) or
execute arbitrary code via a crafted TIFF image, which triggers an
out-of-bounds write.

Bugs

Notes

Author Note
mdeslaur RHEL patch is incorrect, see upstream bug
OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchtiff< 4.0.3-7ubuntu0.6UNKNOWN
ubuntu16.04noarchtiff< 4.0.6-1ubuntu0.1UNKNOWN
ubuntu16.10noarchtiff< 4.0.6-2ubuntu0.1UNKNOWN