CVE-2016-3619 PUBLISHED

The DumpModeEncode function in tif_dumpmode.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c none" option is used, allows remote attackers to cause a denial of service (buffer over-read) via a crafted BMP image.

EPSS 0.95% · 76.3th percentile

Risk Scores

EPSS Score
0.95%
76.3th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:16.04:LTStiff0, 4.0.3-12.3ubuntu2, 4.0.5-1
Ubuntu:Pro:14.04:LTStiff4.0.3-7ubuntu0.11+esm15, 0, 4.0.3-7ubuntu0.11+esm16

Timeline

References

Open in Interactive Console →