CVE-2016-9453
Summary
| CVE | CVE-2016-9453 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2017-01-27 17:59:00 UTC |
|---|
| Updated | 2019-12-31 18:57:00 UTC |
|---|
| Description | The t2p_readwrite_pdf_image_tile function in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a JPEG file with a TIFFTAG_JPEGTABLES of length one. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| LibTIFF 'tiff2pdf.c' Out Of Bounds Write Denial of Service Vulnerability |
BID |
www.securityfocus.com |
Third Party Advisory, VDB Entry |
| Debian -- Security Information -- DSA-3762-1 tiff |
DEBIAN |
www.debian.org |
Third Party Advisory |
| libTIFF: Multiple vulnerabilities (GLSA 201701-16) — Gentoo Security |
GENTOO |
security.gentoo.org |
Third Party Advisory |
| [security-announce] openSUSE-SU-2016:3035-1: important: Security update |
SUSE |
lists.opensuse.org |
Mailing List, Third Party Advisory |
| oss-security - Re: CVE Request: libtiff: Out-of-bounds Write memcpy and less bound check in tiff2pdf |
MLIST |
www.openwall.com |
Mailing List, Third Party Advisory |
| Bug 2579 – CVE-2016-9453: out-of-bounds Write Caused by memcpy and no bound check in tiff2pdf |
CONFIRM |
bugzilla.maptools.org |
Issue Tracking, Third Party Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 710479 Gentoo Linux libTIFF Multiple Vulnerabilities (GLSA 201701-16)
