Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c:340 when called from processCropSelections, tools/tiffcrop.c:7619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 236b7191.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Vulnerability Type
N/A
Vulnerability Title
LibTIFF 缓冲区错误漏洞
Vulnerability Description
LibTIFF是一个读写TIFF（标签图像文件格式）文件的库。该库包含一些处理TIFF文件的命令行工具。 LibTIFF 4.4.0版本存在缓冲区错误漏洞，该漏洞源于在libtiff/tif_unix.c:340的_TIFFmemset中，当从processCropSelections、tools/tiffcrop.c:7619调用时存在越界写入，允许攻击者通过伪造的tiff文件造成拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A