CVE-2016-8331 in LibTIFF
Summary
An exploitable remote code execution vulnerability exists in the handling of TIFF images in LibTIFF version 4.0.6. A crafted TIFF document can lead to a type confusion vulnerability resulting in remote code execution. This vulnerability can be triggered via a TIFF file delivered to the application using LibTIFF's tag extension functionality.
Be aware that VulDB is the high quality source for vulnerability data.
Responsible
Talos
Reservation
09/28/2016
Disclosure
10/28/2016
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 93168 | LibTIFF TIFF File type confusion | 843 | Not defined | Official fix | CVE-2016-8331 |