CVE-2017-2870

Name of the Vulnerable Software and Affected Versions Gdk-Pixbuf version 2.36.6

Description An exploitable integer overflow issue exists in the tiff image parse functionality when compiled with Clang. A specially crafted tiff file can cause a heap-overflow, resulting in remote code execution. An attacker can trigger this issue by sending a file or a URL.

Recommendations For Gdk-Pixbuf version 2.36.6, consider avoiding the use of the tiff image parse functionality until a patch is available. As a temporary workaround, restrict the handling of tiff files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.