CVE-2016-10272: Buffer Overflow
Published Mar 24, 2017
·Updated
LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted TIFF image, related to "WRITE of size 2048" and libtiff/tifnext.c:64:9.
Affected Software
1 affected component
LibTIFF libtiff=4.0.7
Remediation
Event History
Mar 24, 2017
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-10272?
CVE-2016-10272 has a severity rating indicating it allows for a denial of service due to a heap-based buffer overflow.
2
How do I fix CVE-2016-10272?
To fix CVE-2016-10272, update to a patched version of LibTIFF that addresses this vulnerability.
3
What versions of LibTIFF are affected by CVE-2016-10272?
CVE-2016-10272 specifically affects LibTIFF version 4.0.7.
4
What kind of attack does CVE-2016-10272 facilitate?
CVE-2016-10272 facilitates a denial of service attack through a crafted TIFF image.
5
Is there any potential impact beyond denial of service for CVE-2016-10272?
CVE-2016-10272 may have unspecified additional impacts aside from denial of service.