header-logo
Suggest Exploit
vendor:
libTIFF
by:
SecurityFocus
7,5
CVSS
HIGH
Denial-of-Service
20
CWE
Product Name: libTIFF
Affected Version From: 3.9.4
Affected Version To: 3.9.4
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2009

LibTIFF Denial-of-Service Vulnerability

LibTIFF is prone to a denial-of-service vulnerability because it fails to properly validate user-supplied input. An attacker can exploit this issue to crash an application that uses the vulnerable library, denying service to legitimate users. Due to the nature of this issue, attackers may be able to execute arbitrary code, but this has not been confirmed.

Mitigation:

Ensure that user-supplied input is properly validated.
Source

Exploit-DB raw data:

From: https://www.securityfocus.com/bid/41480/
LibTIFF is prone to a denial-of-service vulnerability because it fails to properly validate user-supplied input.

An attacker can exploit this issue to crash an application that uses the vulnerable library, denying service to legitimate users. Due to the nature of this issue, attackers may be able to execute arbitrary code, but this has not been confirmed.

Versions up to and including libTIFF 3.9.4 are vulnerable. 

PoC:
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/14573.tif.gz (lp589145-sample.tif.gz)

Navigation

Suggest Exploit

Services By CQR