CVE-2017-2870 | BDVDB-2026-89926 Detail

Description#

An exploitable integer overflow vulnerability exists in the tiff_image_parse functionality of Gdk-Pixbuf 2.36.6 when compiled with Clang. A specially crafted tiff file can cause a heap-overflow resulting in remote code execution. An attacker can send a file or a URL to trigger this vulnerability.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12017-09-05Record published in the CVE List.
2. Version 22024-09-16Most recent update recorded in the CVE List.