cve/2017/CVE-2017-5849.md

CVE-2017-5849

Description

tiffttopnm in netpbm 10.47.63 does not properly use the libtiff TIFFRGBAImageGet function, which allows remote attackers to cause a denial of service (out-of-bounds read and write) via a crafted tiff image file, related to transposing width and height values.

POC

Reference

• http://bugzilla.maptools.org/show_bug.cgi?id=2654
• http://bugzilla.maptools.org/show_bug.cgi?id=2655

Github

No PoCs found on GitHub currently.