Ubuntu.comUB:CVE-2016-5652CVE-2016-5652
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
0.019 Low
EPSS
Percentile
88.6%
An exploitable heap-based buffer overflow exists in the handling of TIFF
images in LibTIFF’s TIFF2PDF tool. A crafted TIFF document can lead to a
heap-based buffer overflow resulting in remote code execution.
Vulnerability can be triggered via a saved TIFF file delivered by other
means.
Bugs
Notes
| Author | Note |
|---|---|
| sbeattie | occurs in TIFF2PDF tool. |
| mdeslaur | this will not be fixed in precise/esm |
Related
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
0.019 Low
EPSS
Percentile
88.6%