| Package | Affected versions | Patched versions |
|---|---|---|
| libtiff | = 3.4= 3.5.1= 3.5.2= 3.5.3= 3.5.4= 3.5.5= 3.5.6= 3.5.7= 3.6.0= 3.6.1= 3.7.0= 3.7.1= 3.7.2= 3.7.3= 3.7.4= 3.8.0= 3.8.1= 3.8.2= 3.9= 3.9.0= 3.9.1= 3.9.2= 3.9.2-5.2.1= 3.9.3= 3.9.4= 3.9.5= 4.0= 4.0.1≤ 4.0.2 |
Heap-based buffer overflow in tif_pixarlog.c in LibTIFF before 4.0.3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted TIFF image using the PixarLog Compression format.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free