CVEs-PoC/2016/CVE-2016-3658.md

CVE-2016-3658

Description

The TIFFWriteDirectoryTagLongLong8Array function in tif_dirwrite.c in the tiffset tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via vectors involving the ma variable.

POC

Reference

• http://www.openwall.com/lists/oss-security/2016/04/08/12
• http://www.openwall.com/lists/oss-security/2016/04/08/12

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/gwangmu/bisector