CVE-2016-3633: High severity tiff vulnerability
Published Oct 3, 2016
·Updated
The setrow function in the thumbnail tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the src variable.
Affected Software
1 affected component
LibTIFF libtiff<=4.0.6
Event History
Oct 3, 2016
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-3633?
CVE-2016-3633 has a medium severity rating, primarily affecting the stability of applications using LibTIFF.
2
How does CVE-2016-3633 impact vulnerable systems?
CVE-2016-3633 can lead to a denial of service due to an out-of-bounds read when processing certain TIFF files.
3
What versions of LibTIFF are affected by CVE-2016-3633?
CVE-2016-3633 affects LibTIFF versions up to and including 4.0.6.
4
How do I fix CVE-2016-3633?
To fix CVE-2016-3633, upgrade to LibTIFF version 4.0.7 or later.
5
Can CVE-2016-3633 be exploited remotely?
Yes, CVE-2016-3633 can be exploited remotely if a system parses specially crafted TIFF files.