CVE-2016-9535
28Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 9.8epss 4.8%
probabilidad de explotación
4.8%top 9% de las CVE
explotación observada
noninguna fuente lo reporta
tif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual tile size like YCbCr with subsampling. Reported as MSVR 35105, aka "Predictor heap-buffer-overflow."
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
n/a · n/aReferencias
http://rhn.redhat.com/errata/RHSA-2017-0225.htmlhttps://github.com/vadz/libtiff/commit/3ca657a8793dd011bf869695d72ad31c779c3cc1https://github.com/vadz/libtiff/commit/6a984bf7905c6621281588431f384e79d11a2e33http://www.debian.org/security/2017/dsa-3844http://www.securityfocus.com/bid/94484http://www.securityfocus.com/bid/94744