CVEs-PoC/2017/CVE-2017-9117.md

CVE-2017-9117

Description

In LibTIFF 4.0.7, the program processes BMP images without verifying that biWidth and biHeight in the bitmap-information header match the actual input, leading to a heap-based buffer over-read in bmp2tiff.

POC

Reference

• http://bugzilla.maptools.org/show_bug.cgi?id=2690
• http://bugzilla.maptools.org/show_bug.cgi?id=2690
• https://usn.ubuntu.com/3606-1/
• https://usn.ubuntu.com/3606-1/

Github

No PoCs found on GitHub currently.