NetSight
IP …
high8.8

CVE-2014-8129

LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted TIFF image, as…

Impact

LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by failure of tif_next.c to verify that the BitsPerSample value is 2, and the t2p_sample_lab_signed_to_unsigned function in tiff2pdf.c.

Affected products

VendorProductAffected versions
LibtiffLibtiff
Version 4.0.3
DebianDebian Linux
Version 7.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Server Aus
Versions 7.2, 7.3, 7.4
RedhatEnterprise Linux Server Eus
Versions 7.2, 7.3, 7.4
RedhatEnterprise Linux Server Tus
Versions 7.2, 7.3
AppleMac Os X
Versions 10.8.5, 10.9.5, 10.10.0, 10.10.1, 10.10.2, 10.10.3
AppleIphone Os
All versions

Weakness classification

CWE-787

References