Vulnetix
Try Vulnetix Request Demo
CVE-2017-9935 PUBLISHED

In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2p_write_pdf function in tools/tiff2pdf.c. This heap overflow could lead to different damages. For example, a crafted TIFF document can lead to an out-of-bounds read in TIFFCleanup, an invalid free in TIFFClose or t2p_free, memory corruption in t2p_readwrite_pdf_image, or a double free in t2p_free. Given these possibilities, it probably could cause arbitrary code execution.

EPSS 0.55% · 67.9th percentile

Risk Scores

EPSS Score
0.55%
67.9th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTStiff0, 4.0.3-12.3ubuntu2, 4.0.5-1
Ubuntu:14.04:LTStiff4.0.3-7ubuntu0.2, 4.0.3-7ubuntu0.3, 4.0.3-7ubuntu0.4

Timeline

References

Open in Interactive Console →