Out-of-bounds read in the PixarLogCleanup function in tif_pixarlog.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application by sending a crafted TIFF image to the rgb2ycbcr tool.
References
Link | Resource |
---|---|
http://lists.opensuse.org/opensuse-updates/2016-07/msg00087.html | Third Party Advisory |
http://lists.opensuse.org/opensuse-updates/2016-09/msg00060.html | Third Party Advisory |
http://lists.opensuse.org/opensuse-updates/2016-09/msg00090.html | Third Party Advisory |
http://www.debian.org/security/2017/dsa-3762 | |
http://www.openwall.com/lists/oss-security/2016/06/15/3 | Mailing List Third Party Advisory |
http://www.securityfocus.com/bid/91203 | |
https://security.gentoo.org/glsa/201701-16 |
Configurations
History
No history.
Information
Published : 2017-01-20 15:59
Updated : 2024-02-28 15:44
NVD link : CVE-2016-5316
Mitre link : CVE-2016-5316
CVE.ORG link : CVE-2016-5316
JSON object : View
Products Affected
opensuse_project
- leap
libtiff
- libtiff
opensuse
- opensuse
CWE
CWE-125
Out-of-bounds Read