LibTIFF 3.9.4 – Unknown Tag Second Pass Processing Remote Denial of Service

Exploit Database
10 阅读

作者： Tom Lane

日期： 2010-06-14
类别：
- dos
平台：
- linux
来源：https://www.exploit-db.com/exploits/34279/

source: https://www.securityfocus.com/bid/41477/info

LibTIFF is prone to a denial-of-service vulnerability because it fails to properly validate user-supplied input.

An attacker can exploit this issue to crash an application that uses the vulnerable library, denying service to legitimate users. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/34279.tif

last Exploits
LibTIFF 3.9.4 – Unknown Tag Second Pass Processing Remote Denial of Service的更多信息

Apple Mac OSX – IOBluetoothHCIPacketLogUserClient Memory Corruption：
Microsoft MsMpEng – Remote Use-After-Free Due to Design Issue in GC Engine：
Microsoft DirectWrite / AFDKO – Stack Corruption in OpenType Font Handling Due to Negative nAxes：
Sony Playstation 4 (PS4) 5.01 < 5.05 - WebKit Code Execution (PoC)：
VBScript – VbsErase Reference Leak Use-After-Free：
Microsoft Windows Kernel – ‘nt!NtSetIoCompletion / nt!NtRemoveIoCompletion’ Pool Memory Disclosure：
JavaScriptCore – Type Confusion During Bailout when Reconstructing Arguments Objects：
Apple macOS/iOS – Kernel Double Free due to IOSurfaceRootUserClient not Respecting MIG Ownership Rules：