CVE-2017-9117 in LibTIFF
Summary
In LibTIFF 4.0.7, the program processes BMP images without verifying that biWidth and biHeight in the bitmap-information header match the actual input, leading to a heap-based buffer over-read in bmp2tiff.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
05/21/2017
Disclosure
05/21/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 101537 | LibTIFF bmp2tiff memory corruption | 119 | Not defined | Official fix | CVE-2017-9117 |