Heap-based Buffer Overflow in LibTIFF's TIFF2PDF Tool

CVE-2016-5652 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:P/A:P

An exploitable heap-based buffer overflow exists in the handling of TIFF images in LibTIFF's TIFF2PDF tool. A crafted TIFF document can lead to a heap-based buffer overflow resulting in remote code execution. Vulnerability can be triggered via a saved TIFF file delivered by other means.

Learn more about our Web Application Penetration Testing UK.