NVD

Id
28097  
Name
CVE-2015-7554  
Description
The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF image.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-01-08  
Modified Date
2016-12-07  
Seq
2015-7554  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
147626 28097 CVE-2015-7554 openSUSE-SU-2016:0212  View
147627 28097 CVE-2015-7554 openSUSE-SU-2016:0215  View
147628 28097 CVE-2015-7554 openSUSE-SU-2016:0252  View
147629 28097 CVE-2015-7554 http://packetstormsecurity.com/files/135078/libtiff-4.0.6-Invalid-Write.html  View
147630 28097 CVE-2015-7554 20151226 libtiff: invalid write (CVE-2015-7554)  View
147631 28097 CVE-2015-7554 [oss-security] 20151226 libtiff: invalid write (CVE-2015-7554)  View
147632 28097 CVE-2015-7554 http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html  View
147633 28097 CVE-2015-7554 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
147634 28097 CVE-2015-7554 20151226 libtiff: invalid write (CVE-2015-7554)  View
147635 28097 CVE-2015-7554 79699  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11426 JVNDB-2015-006746 LibTIFF の tif_dir.c の _TIFFVGetField 関数におけるサービス運用妨害 (DoS) の脆弱性 LibTIFF の tif_dir.c の _TIFFVGetField 関数には、サービス運用妨害 (不正なメモリ書き込みおよびクラッシュ) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2015-7554 84779 CVE-2015-7554 28097 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006746.html 2015-12-26 2016-01-14 View