CVE-2017-5225

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.0.7

Description The issue is caused by a heap buffer overflow in the tools/tiffcp, resulting in potential denial of service (DoS) or code execution. This can be achieved via a crafted BitsPerSample value. The exploitation of this issue may allow a remote attacker to cause a denial of service or execute arbitrary code.

Recommendations For LibTIFF version 4.0.7, consider updating to a newer version that addresses this issue, as no specific workaround is provided for this version. At the moment, there is no information about a newer version that contains a fix for this vulnerability.