Wind River Support Network

HomeDefectsLIN9-4288
Acknowledged

LIN9-4288 : Security Advisory - libtiff - CVE-2017-9117

Created: May 25, 2017    Updated: May 29, 2018
Found In Version: 9.0.0.6
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Userspace

Description

In LibTIFF 4.0.7, the program processes BMP images without verifying that biWidth and biHeight in the bitmap-information header match the actual input, leading to a heap-based buffer over-read in bmp2tiff.

https://nvd.nist.gov/vuln/detail/CVE-2017-9117

CVEs

  • Linkedin
  • Facebook
  • Twitter
  • Youtube