CVE-2016-5652: Buffer Overflow
An exploitable heap-based buffer overflow exists in the handling of TIFF images in LibTIFF's TIFF2PDF tool. A crafted TIFF document can lead to a heap-based buffer overflow resulting in remote code execution. Vulnerability can be triggered via a saved TIFF file delivered by other means.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-5652?
CVE-2016-5652 is classified as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2016-5652?
To mitigate CVE-2016-5652, update affected LibTIFF packages to the latest versions provided by your distribution.
What kind of attack is possible with CVE-2016-5652?
CVE-2016-5652 enables attackers to execute arbitrary code on a system through a specially crafted TIFF image.
Which versions of LibTIFF are affected by CVE-2016-5652?
CVE-2016-5652 affects LibTIFF version 4.0.6 and earlier versions.
Can CVE-2016-5652 be exploited through email attachments?
Yes, CVE-2016-5652 can be exploited by delivering a malicious TIFF file via email or other means.