CVE-2016-3991

Heap-based buffer overflow in the loadImage function in the tiffcrop tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted TIFF image with zero tiles.

Database specific

{
    "unresolved_ranges": [
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:o:oracle:vm_server:3.3:*:*:*:*:*:x86:*",
                "cpe:2.3:o:oracle:vm_server:3.4:*:*:*:*:*:x86:*"
            ],
            "vendor_product": "oracle:vm_server",
            "extracted_events": [
                {
                    "last_affected": "3.3"
                },
                {
                    "last_affected": "3.4"
                }
            ]
        }
    ]
}

References

CVE-2016-3991

Affected packages