| Package | Affected versions | Patched versions |
|---|---|---|
| libtiff | ≤ 4.0.6 | |
| vm server | = 3.3= 3.4 |
Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a large width field in a BMP image.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free