tif_dirread.c in LibTIFF 4.0.7 might allow remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image.
CVSS Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HLibtiff
APPLibtiff4.0.7
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
CWE
References
Related vulnerabilities
CVE-2016-6223CRITICAL9.1PL ✓same product
Libtiff: odczyt spoza bufora przez ujemny indeks w plikach TIFF
CVE-2016-9533CRITICAL9.8PL ✓same product
LibTIFF: zapis poza buforem sterty w tif_pixarlog.c (PixarLog)
CVE-2016-9535CRITICAL9.8PL ✓same product
Buffer overflow w libtiff 4.0.6 — błąd w obsłudze predyktora kafelków YCbCr
CVE-2016-9534CRITICAL9.8PL ✓same product
libtiff: heap-buffer-overflow w TIFFFlushData1 — błąd ścieżki błędu
CVE-2016-9536CRITICAL9.8PL ✓same product
Podatność heap buffer overflow w libtiff 4.0.6 (tiff2pdf)