CVE-2016-9453
High
Description
The t2p_readwrite_pdf_image_tile function in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a JPEG file with a TIFFTAG_JPEGTABLES of length one.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Libtiff
PublishedJan 27, 2017
First seenJan 27, 2017
How to fix
Update
- libtiff libtiff4.0.7 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| libtiff libtiff | v < 4.0.7 | 4.0.7 |
| opensuse opensuse | 13.2 | — |
| debian debian_linux | 8.0, 9.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.