CVE-2016-5652 | BDVDB-2026-80100 Detail

LibTiffLibTiff

Description#

An exploitable heap-based buffer overflow exists in the handling of TIFF images in LibTIFF's TIFF2PDF tool. A crafted TIFF document can lead to a heap-based buffer overflow resulting in remote code execution. Vulnerability can be triggered via a saved TIFF file delivered by other means.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://security.gentoo.org/glsa/201701-16
http://rhn.redhat.com/errata/RHSA-2017-0225.html
http://www.debian.org/security/2017/dsa-3762
http://www.talosintelligence.com/reports/TALOS-2016-0187/
http://www.securityfocus.com/bid/93902

Exploit#

No public exploit known

History#

Version 12017-01-06Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.