NetSight
IP …
critical9.8

CVE-2015-7554

The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or possibly have unspe…

Impact

The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF image.

Affected products

VendorProductAffected versions
LibtiffLibtiff
Version 4.0.6

Weakness classification

CWE-254

References