| Package | Affected versions | Patched versions |
|---|---|---|
| libtiff | = 3.4= 3.5.1= 3.5.2= 3.5.3= 3.5.4= 3.5.5= 3.5.6= 3.5.7= 3.6.0= 3.6.1= 3.7.0= 3.7.1= 3.7.2= 3.7.3= 3.7.4= 3.8.0= 3.8.1= 3.8.2= 3.9= 3.9.0= 3.9.1= 3.9.2= 3.9.2-5.2.1= 3.9.3= 3.9.4= 3.9.5= 4.0≤ 4.0.1 |
Stack-based buffer overflow in tif_dir.c in LibTIFF before 4.0.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DOTRANGE tag in a TIFF image.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free