Medium severity5.5NVD Advisory· Published Mar 15, 2017· Updated May 13, 2026
CVE-2017-5849
CVE-2017-5849
Description
tiffttopnm in netpbm 10.47.63 does not properly use the libtiff TIFFRGBAImageGet function, which allows remote attackers to cause a denial of service (out-of-bounds read and write) via a crafted tiff image file, related to transposing width and height values.
Affected products
3cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:25:*:*:*:*:*:*:*
- cpe:2.3:a:netpbm_project:netpbm:10.47.63:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- bugzilla.maptools.org/show_bug.cginvdExploitIssue TrackingThird Party AdvisoryVDB Entry
- bugzilla.maptools.org/show_bug.cginvdExploitIssue TrackingThird Party AdvisoryVDB Entry
- www.openwall.com/lists/oss-security/2017/02/02/2nvdMailing ListThird Party Advisory
- www.securityfocus.com/bid/96011nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AF42A624FXVY3BYBHMAO6F2X7EJYHQE2/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LDK3BDMKIQL2NQ3SJZXPBEN2LSOUSSEE/nvd
News mentions
0No linked articles in our index yet.