CVE-2017-9937: Buffer Overflow
In LibTIFF 4.0.8, there is a memory malloc failure in tifjbig.c. A crafted TIFF document can lead to an abort resulting in a remote denial of service attack.
Other sources
LibTIFF is vulnerable to a denial of service, caused by a memory malloc failure in tifjbig.c. By persuading a victim to open a specially-crafted TIFF document, a remote attacker could exploit this vulnerability to cause the application to crash.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-9937?
CVE-2017-9937 is classified as a denial of service vulnerability that can cause application crashes.
How do I fix CVE-2017-9937?
To fix CVE-2017-9937, update to versions of IBM Cognos Analytics above 12.0.3 or 11.2.4 FP4, or upgrade LibTIFF above 4.0.8.
What products are affected by CVE-2017-9937?
CVE-2017-9937 affects IBM Cognos Analytics versions 11.2.0 to 11.2.4 FP4 and 12.0.0 to 12.0.3, as well as LibTIFF version 4.0.8.
Can CVE-2017-9937 be exploited remotely?
Yes, CVE-2017-9937 can be exploited remotely if a victim opens a crafted TIFF document.
What is the impact of CVE-2017-9937?
The impact of CVE-2017-9937 is a denial of service, causing the application to abort.