In LibTIFF 4.0.8, there is a memory leak in tif_jbig.c. A crafted TIFF document can lead to a memory leak resulting in a remote denial of service attack.
The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.
Link | Tags |
---|---|
http://www.securityfocus.com/bid/99300 | vdb entry third party advisory |
https://usn.ubuntu.com/3602-1/ | third party advisory vendor advisory |
https://www.exploit-db.com/exploits/42300/ | exploit vdb entry third party advisory |
http://bugzilla.maptools.org/show_bug.cgi?id=2706 | issue tracking |
http://www.debian.org/security/2017/dsa-3903 | third party advisory vendor advisory |