Wind River Support Network

HomeDefectsLIN9-3256

Not to be fixed

LIN9-3256 : Security Advisory - libtiff - CVE-2017-5563

Created: Feb 9, 2017 Updated: May 29, 2018

Resolved Date: May 23, 2017

Found In Version: 9.0.0.2

Severity: Standard

Applicable for: Wind River Linux 9

Component/s: Userspace

Description

LibTIFF version 4.0.7 is vulnerable to a heap-based buffer over-read in tif_lzw.c resulting in DoS or code execution via a crafted bmp image to tools/bmp2tiff.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-5563

CVEs

CVE-2017-5563