CVE-2016-3945: Integer Overflow
Multiple integer overflows in the (1) cvtbystrip and (2) cvtbytile functions in the tiff2rgba tool in LibTIFF 4.0.6 and earlier, when -b mode is enabled, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image, which triggers an out-of-bounds write.
Other sources
Out-of-bounds write vulnerability was found in cvtbystrip and cvtbytile functions in tiff2rgba, allowing attacker to cause a denial of service or command execution via a crafted TIFF image.
Public via:
http://seclists.org/oss-sec/2016/q2/30
Upstream bug:
http://bugzilla.maptools.org/showbug.cgi?id=2545
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-3945?
CVE-2016-3945 is considered to have a high severity due to its potential to cause a denial of service or execute arbitrary code.
How do I fix CVE-2016-3945?
To fix CVE-2016-3945, upgrade LibTIFF to version 4.1.0 or later that is not vulnerable.
Which versions of LibTIFF are affected by CVE-2016-3945?
LibTIFF versions 4.0.6 and earlier are affected by CVE-2016-3945.
Can CVE-2016-3945 lead to data breaches?
Yes, CVE-2016-3945 can potentially lead to data breaches if exploited by attackers to execute arbitrary code.
Is there a workaround for CVE-2016-3945?
There are no effective workarounds for CVE-2016-3945; the recommended action is to update to a patched version.