CVE

Id
102669  
CVE No.
CVE-2017-5849  
Status
Candidate  
Description
tiffttopnm in netpbm 10.47.63 does not properly use the libtiff TIFFRGBAImageGet function, which allows remote attackers to cause a denial of service (out-of-bounds read and write) via a crafted tiff image file, related to transposing width and height values.  
Phase
Assigned (20170201)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
805540 102669 CVE-2017-5849 MLIST:[oss-security] 20170202 Re: CVE request: Out-of-Bound read and write issues in put1bitbwtile()(tiff-4.0.7/libtiff/tif-getimage.c:1352) and putgreytile()(tiff-4.0.7/libtiff/tif-getimage.c:1288)  View
805541 102669 CVE-2017-5849 URL:http://www.openwall.com/lists/oss-security/2017/02/02/2  View
805542 102669 CVE-2017-5849 MISC:http://bugzilla.maptools.org/show_bug.cgi?id=2654  View
805543 102669 CVE-2017-5849 MISC:http://bugzilla.maptools.org/show_bug.cgi?id=2655  View
805544 102669 CVE-2017-5849 FEDORA:FEDORA-2017-1855c8af2c  View
805545 102669 CVE-2017-5849 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LDK3BDMKIQL2NQ3SJZXPBEN2LSOUSSEE/  View
805546 102669 CVE-2017-5849 FEDORA:FEDORA-2017-fa4e441e03  View
805547 102669 CVE-2017-5849 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AF42A624FXVY3BYBHMAO6F2X7EJYHQE2/  View
805548 102669 CVE-2017-5849 BID:96011  View

Related JVN