PT-2016-7772
CVE-2016-9538
·
Publicado
2016-11-22
·
Atualizado
2024-06-15
Descrição por
CVSS 3.1
9.8
CríticaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
libtiff version 4.0.6
Description
The issue arises from a uint16 integer overflow in the readContigStripsIntoBuffer() function, located in tools/tiffcrop.c, causing the program to read an undefined buffer.
Recommendations
For libtiff version 4.0.6, consider updating to a newer version that addresses this issue, as the current version is affected by the integer overflow in the readContigStripsIntoBuffer() function.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾