REDHAT-BUG-1614051: Buffer Overflow

Published Aug 8, 2018

Updated

A flaw was found in in LibTIFF 4.0.9. ChopUpSingleUncompressedStrip in tifdirread.c allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) via a crafted TIFF file, as demonstrated by tiff2pdf.

References: http://bugzilla.maptools.org/showbug.cgi?id=2808

Affected Software

1 affected component

LibTIFF libtiff

Event History

Aug 8, 2018

Data Sourced

via Red Hat·09:55 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Who is exposed to this issue?

Applications using LibTIFF 4.0.9 that process attacker-controlled TIFF files are exposed. The issue is demonstrated through tiff2pdf, so workflows that convert untrusted TIFF input are a relevant attack surface.

What does an attacker need to exploit it?

An attacker needs to provide a crafted TIFF file for a vulnerable application to process. Successful exploitation can cause a heap-based buffer overflow and application crash, resulting in denial of service.

REDHAT-BUG-1614051: Buffer Overflow

Affected Software

Event History

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?