CVE-2005-2452

libtiff up to 3.7.0 allows remote attackers to cause a denial of service (application crash) via a TIFF image header with a zero "YCbCr subsampling" value…

published August 3, 2005

CVSS
—
EPSS
2%
Percentile
80.0
In the wild
Unconfirmed
What it is

libtiff up to 3.7.0 allows remote attackers to cause a denial of service (application crash) via a TIFF image header with a zero "YCbCr subsampling" value, which causes a divide-by-zero error in (1) tif_strip.c and (2) tif_tile.c, a different vulnerability than CVE-2004-0804.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01943 · 80.0th percentile
Published
2005-08-03T04:00Z
EPSS history
Timeline
  • 03 AUG 04:00Z
    libtiff up to 3.7.0 allows remote attackers to cause a denial of service (application crash) via a TIFF image header with a zero "YCbCr subsampling" value…
    cvelistv5