Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in tif_dirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, the fix is available with commit eecb0712.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Vulnerability Type
N/A
Vulnerability Title
LibTIFF 代码问题漏洞
Vulnerability Description
Silicon Graphics LibTIFF是美国Silicon Graphics公司的一个读写TIFF（标签图像文件格式）文件的库。该库包含一些处理TIFF文件的命令行工具。 libtiff 3.9.0到4.3.0版本存在安全漏洞，该漏洞源于在tif_dirread.c的TIFFFetchStripThing()中作为参数传递给memcpy()函数的空源指针，漏洞可能导致攻击者通过制作TIFF文件触发拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A