CVE Catalog
CVE-2016-6223
CriticalSummary
The TIFFReadRawStrip1 and TIFFReadRawTile1 functions in libtiff before version 4.0.7 allow remote attackers to cause a denial of service (crash) or possibly obtain sensitive information via a negative index in a file-content buffer.
Risk Assessment
The organization may experience system downtime or leakage of sensitive data, which could lead to serious legal and reputational consequences.
Recommendation
It is recommended to update the libtiff library to version 4.0.7 or later to mitigate this vulnerability.
Original NVD description (English source)
The TIFFReadRawStrip1 and TIFFReadRawTile1 functions in tif_read.c in libtiff before 4.0.7 allows remote attackers to cause a denial of service (crash) or possibly obtain sensitive information via a negative index in a file-content buffer.