CVE-2014-8127
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 5.7%
LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted TIFF image to the (1) checkInkNamesString function in tif_dir.c in the thumbnail tool, (2) compresscontig function in tiff2bw.c in the tiff2bw tool, (3) putcontig8bitCIELab function in tif_getimage.c in the tiff2rgba tool, LZWPreDecode function in tif_lzw.c in the (4) tiff2ps or (5) tiffdither tool, (6) NeXTDecode function in tif_next.c in the tiffmedian tool, or (7) TIFFWriteDirectoryTagLongLong8Array function in tif_dirwrite.c in the tiffset tool.
Produtos afetados
n/a · n/aReferências
http://bugzilla.maptools.org/show_bug.cgi?id=2484http://bugzilla.maptools.org/show_bug.cgi?id=2485http://bugzilla.maptools.org/show_bug.cgi?id=2486http://bugzilla.maptools.org/show_bug.cgi?id=2496http://bugzilla.maptools.org/show_bug.cgi?id=2497http://bugzilla.maptools.org/show_bug.cgi?id=2500http://lists.opensuse.org/opensuse-updates/2015-03/msg00022.htmlhttp://rhn.redhat.com/errata/RHSA-2016-1546.htmlhttp://rhn.redhat.com/errata/RHSA-2016-1547.htmlhttps://security.gentoo.org/glsa/201701-16http://www.conostix.com/pub/adv/CVE-2014-8127-LibTIFF-Out-of-bounds_Reads.txthttp://www.debian.org/security/2015/dsa-3273