CVE-2016-10269
HighSummary
LibTIFF versions from 4.0.0alpha4 to 4.0.7 allow remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image.
Risk Assessment
Attackers may exploit this vulnerability to disrupt system operations, potentially leading to service downtime or loss of availability for applications processing TIFF images.
Recommendation
It is recommended to update LibTIFF to the latest version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in LibTIFF
See all- CVE-2017-17973High
In LibTIFF version 4.0.8, there is a heap-based use-after-free vulnerability in the t2p_writeproc function in tiff2pdf.c.
- CVE-2017-17942High
In LibTIFF version 4.0.9, there is a heap-based buffer over-read in the function PackBitsEncode in tif_packbits.c.
- CVE-2017-17095High
The pal2rgb tool in LibTIFF 4.0.9 has a vulnerability that allows remote attackers to cause application crashes via a crafted TIFF file due to a heap-based buffer overflow.
- CVE-2017-12944High
The TIFFReadDirEntryArray function in LibTIFF 4.0.8 mishandles memory allocation for short files, potentially leading to application crashes during tiff2pdf invocation.
- CVE-2017-11335High
There is a heap based buffer overflow in LibTIFF 4.0.8 in tools/tiff2pdf.c triggered by a PlanarConfig=Contig image. This can lead to an out-of-bounds write and potentially to remote denial of service or arbitrary code execution attacks.
- CVE-2017-10688High
In LibTIFF version 4.0.8, there is an assertion abort in the TIFFWriteDirectoryTagCheckedLong8Array function in tif_dirwrite.c. Crafted input can lead to a remote denial of service attack.
- CVE-2017-9935High
In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2p_write_pdf function, which could lead to various damages. A crafted TIFF document can lead to out-of-bounds read, invalid free, or memory corruption, potentially allowing arbitrary code execution.
- CVE-2017-7602High
LibTIFF version 4.0.7 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
- CVE-2017-7601High
LibTIFF version 4.0.7 has an undefined behavior issue related to 'shift exponent too large for 64-bit type long', which may lead to application crashes.
- CVE-2017-7600High
LibTIFF version 4.0.7 has an undefined behavior issue related to values outside the range of representable values of type unsigned char, which may allow remote attackers to cause application crashes or possibly have unspecified other impacts via a crafted image.
Original NVD description (English source)
LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6 and 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 512" and libtiff/tif_unix.c:340:2.