oss-sec mailing list archives
Re: libtiff: multiple divide-by-zero
From: Leo Famulari <leo () famulari name>
Date: Sun, 1 Jan 2017 19:20:54 -0500
On Sun, Jan 01, 2017 at 04:46:12PM +0100, Agostino Sarubbo wrote:
Description: Libtiff is a software that provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. Some crafted images, through a fuzzing revealed multiple division by zero. Since the number of the issues, I will post the relevant part of the stacktrace. Affected version / Tested on: 4.0.7 Fixed version: N/A Commit fix: https://github.com/vadz/libtiff/commit/438274f938e046d33cb0e1230b41da32ffe223e1
Do you know if this repository has any relationship to the libtiff project? It describes itself like this: "Unofficial mirror of libtiff cvs repository at cvs.maptools.org created and updated using "git cvsimport"?
Attachment:
signature.asc
Description:
Current thread:
- libtiff: multiple divide-by-zero Agostino Sarubbo (Jan 01)
- Re: libtiff: multiple divide-by-zero Leo Famulari (Jan 02)
- Re: libtiff: multiple divide-by-zero Henri Salo (Jan 02)
- Re: libtiff: multiple divide-by-zero Agostino Sarubbo (Mar 25)
- Re: libtiff: multiple divide-by-zero Leo Famulari (Jan 02)