CVE-2016-10094

Quick assessment

Copy summary Copy citation

Affected

n/a n/a

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Silicon Graphics LibTIFF是美国Silicon Graphics公司的一个读写TIFF（标签图像文件格式）文件的库。该库包含一些处理TIFF文件的命令行工具。 Silicon Graphics LibTIFF 4.0.7版本中的tools/tiff2pdf.c文件的‘t2p_readwrite_pdf_image_tile’函数存在安全漏洞。远程攻击者可借助特制的图片利用该漏洞在受影响的上下文中执行任意代码或造成拒绝服务。

CVE-2016-10094 affects n/a n/a. No confirmed in-the-wild exploitation; assess based on exposure. Silicon Graphics LibTIFF是美国Silicon Graphics公司的一个读写TIFF（标签图像文件格式）文件的库。该库包含一些处理TIFF文件的命令行工具。 Silicon Graphics LibTIFF 4.0.7版本中的tools/tiff2pdf.c文件的‘t2p_readwrite_pdf_image_tile’函数存在安全 CVE-2016-10094 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2016-10094

I. Basic Information for CVE-2016-10094

Affected Products

II. Public POCs for CVE-2016-10094

III. Intelligence Information for CVE-2016-10094

Vendor Advisories for CVE-2016-10094 (2)

• http://www.securityfocus.com/bid/95214 vdb-entry x_refsource_BID
• http://www.debian.org/security/2017/dsa-3762 vendor-advisory x_refsource_DEBIAN

Mailing List Discussions for CVE-2016-10094 (2)

• http://www.openwall.com/lists/oss-security/2017/01/01/10 mailing-list x_refsource_MLIST
• http://www.openwall.com/lists/oss-security/2017/01/01/12 mailing-list x_refsource_MLIST

Other References for CVE-2016-10094 (2)

• https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-heap-based-buffer-overflow/ x_refsource_MISC
• http://bugzilla.maptools.org/show_bug.cgi?id=2640 x_refsource_CONFIRM

• https://www.cve.org/CVERecord?id=CVE-2016-10094

Same Patch Batch · n/a · 2017-03-01 · 49 CVEs total

Showing top 20 of 49 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2016-10094