CVE-2017-17095

HIGH

LibTIFF 4.0.9 - Heap-Based Buffer Overflow in pal2rgb

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2017-17095. PoCs published by Jungun Baek.

AI-analyzed exploit summary The exploit demonstrates a heap-buffer-overflow vulnerability in LibTIFF's pal2rgb tool, where an incorrectly sized output buffer leads to memory corruption when processing specially crafted TIFF files. The PoC includes detailed analysis and debug information confirming the overflow.

Description

tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (TIFFSetupStrips heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted TIFF file.

Exploits (1)

exploitdb WORKING POC

by Jungun Baek · textdoslinux

https://www.exploit-db.com/exploits/43322

View Code ZIP pw:eip

The exploit demonstrates a heap-buffer-overflow vulnerability in LibTIFF's pal2rgb tool, where an incorrectly sized output buffer leads to memory corruption when processing specially crafted TIFF files. The PoC includes detailed analysis and debug information confirming the overflow.

Classification

Working Poc 100%

Attack Type

Dos

Complexity

Moderate

Reliability

Reliable

Target: LibTIFF 4.0.9

No auth needed

Prerequisites: A crafted TIFF file with manipulated ImageWidth and ImageLength values

MITRE ATT&CK