| Package | Affected versions | Patched versions |
|---|---|---|
| libtiff | = 3.4= 3.5.1= 3.5.2= 3.5.3= 3.5.4= 3.5.5= 3.5.6= 3.5.7= 3.6.0= 3.6.1= 3.7.0= 3.7.1= 3.7.2= 3.7.3= 3.7.4= 3.8.0= 3.8.1= 3.8.2= 3.9= 3.9.0= 3.9.1= 3.9.2= 3.9.2-5.2.1= 3.9.3= 3.9.4= 4.0= 4.0.1≤ 4.0.2 |
The t2p_read_tiff_init function in tiff2pdf (tools/tiff2pdf.c) in LibTIFF 4.0.2 and earlier does not properly initialize the T2P context struct pointer in certain error conditions, which allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image that triggers a heap-based buffer overflow.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free