First published: Thu Jan 26 2017(Updated: )
The dynamicGetbuf function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TIFF image.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
libgd | <=2.2.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-6911 is classified as a denial of service vulnerability due to an out-of-bounds read in libgd.
To fix CVE-2016-6911, update libgd to version 2.2.4 or later.
CVE-2016-6911 affects libgd versions prior to 2.2.4.
CVE-2016-6911 can be exploited by remote attackers using specially crafted TIFF images.
The impact of CVE-2016-6911 is primarily denial of service, leading to application crashes.