Aller au contenu
8.8 Élevée

CVE-2017-2870 An exploitable integer overflow vulnerability exists in the tiff_image_parse functionality of Gdk-Pixbuf 2.36.6 when…

Description

An exploitable integer overflow vulnerability exists in the tiff_image_parse functionality of Gdk-Pixbuf 2.36.6 when compiled with Clang. A specially crafted tiff file can cause a heap-overflow resulting in remote code execution. An attacker can send a file or a URL to trigger this vulnerability.

Produits et versions touchés

Produit Versions touchées Corrigé en
Gdk-Pixbuf Versions non publiées
Les 3 CVE de Gdk-Pixbuf →
Suivre cette CVE