Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 619526 - media-libs/tiff: Heap-buffer overflow in LZWEncode tif_lzw.c (CVE-2017-5563)
Summary: media-libs/tiff: Heap-buffer overflow in LZWEncode tif_lzw.c (CVE-2017-5563)
Status: RESOLVED WONTFIX
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Gentoo Security
URL: http://bugzilla.maptools.org/show_bug...
Whiteboard: B2 [upstream]
Keywords:
Depends on:
Blocks:
 
Reported: 2017-05-24 09:11 UTC by GLSAMaker/CVETool Bot
Modified: 2017-05-24 09:14 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description GLSAMaker/CVETool Bot gentoo-dev 2017-05-24 09:11:34 UTC 
CVE-2017-5563 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-5563):
  LibTIFF version 4.0.7 is vulnerable to a heap-based buffer over-read in
  tif_lzw.c resulting in DoS or code execution via a crafted bmp image to
  tools/bmp2tiff.
Comment 1 Thomas Deutschmann (RETIRED) gentoo-dev 2017-05-24 09:14:30 UTC 
Upstream removed bmp2tiff utility (see $URL and https://bugs.gentoo.org/show_bug.cgi?id=585508#c1).