CVE-2016-5652

An exploitable heap-based buffer overflow exists in the handling of TIFF images in LibTIFF's TIFF2PDF tool

published January 6, 2017

CVSS
—
EPSS
4%
Percentile
90.7
In the wild
Unconfirmed
What it is

An exploitable heap-based buffer overflow exists in the handling of TIFF images in LibTIFF's TIFF2PDF tool. A crafted TIFF document can lead to a heap-based buffer overflow resulting in remote code execution. Vulnerability can be triggered via a saved TIFF file delivered by other means.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04141 · 90.7th percentile
Published
2017-01-06T21:00Z
EPSS history
Timeline
  • 06 JAN 21:00Z
    An exploitable heap-based buffer overflow exists in the handling of TIFF images in LibTIFF's TIFF2PDF tool
    cvelistv5