CVE-2016-10095: Buffer Overflow

Published Mar 1, 2017

Updated

Stack-based buffer overflow in the TIFFVGetField function in tifdir.c in LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7 and 4.0.8 allows remote attackers to cause a denial of service (crash) via a crafted TIFF file.

Affected Software

1 affected component

LibTIFF libtiff=4.0.7

Event History

Mar 1, 2017

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Data Sourced

via NVD·03:59 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2016-10095?

CVE-2016-10095 is categorized as a medium severity vulnerability due to its potential to cause denial of service.

How do I fix CVE-2016-10095?

To fix CVE-2016-10095, upgrade LibTIFF to version 4.0.9 or later.

What impact does CVE-2016-10095 have on affected systems?

CVE-2016-10095 allows remote attackers to crash the application by exploiting a crafted TIFF file.

Which versions of LibTIFF are affected by CVE-2016-10095?

LibTIFF versions 4.0.0alpha4 through 4.0.8 are affected by CVE-2016-10095.

Is CVE-2016-10095 a remote code execution vulnerability?

No, CVE-2016-10095 is not a remote code execution vulnerability; it primarily results in a denial of service.