[Secure-testing-team] Bug#863185: tiff: CVE-2017-9147: Out of bound read in _TIFFVGetField

[Salvatore Bonaccorso]

Source: tiff
Version: 4.0.7-7
Severity: important
Tags: upstream security
Forwarded: http://bugzilla.maptools.org/show_bug.cgi?id=2693

Hi Laszlo,

the following vulnerability was published for tiff.

CVE-2017-9147[0]:
| LibTIFF 4.0.7 has an invalid read in the _TIFFVGetField function in
| tif_dir.c, which might allow remote attackers to cause a denial of
| service (crash) via a crafted TIFF file.

Looking from the upstream bugreport at [1] and the affected code, cf.
[2] I think this should affect us. But please double check, I might
miss something?

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2017-9147
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9147
[1] http://bugzilla.maptools.org/show_bug.cgi?id=2693
[2] http://bugzilla.maptools.org/show_bug.cgi?id=2693#c2

Please adjust the affected versions in the BTS as needed.

Regards and thanks for your work,
Salvatore