| Package | Affected versions | Patched versions |
|---|---|---|
| libtiff | = 3.4= 3.5.1= 3.5.2= 3.5.3= 3.5.4= 3.5.5= 3.5.6= 3.5.7= 3.6.0= 3.6.1= 3.7.0= 3.7.1= 3.7.2= 3.7.3= 3.7.4= 3.8.0= 3.8.1= 3.8.2= 3.9= 3.9.0= 3.9.1= 3.9.2= 3.9.2-5.2.1= 3.9.3= 3.9.4= 3.9.5= 4.0= 4.0.1= 4.0.2≤ 4.0.3 |
The LZW decompressor in the gif2tiff tool in libtiff 4.0.3 and earlier allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a crafted GIF image.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free