An exploitable integer overflow vulnerability exists in the tiff_image_parse functionality of Gdk-Pixbuf 2.36.6 when compiled with Clang. A specially crafted tiff file can cause a heap-overflow resulting in remote code execution. An attacker can send a file or a URL to trigger this vulnerability.
History

Sun, 13 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00491}

epss

{'score': 0.03}


cve-icon MITRE

Status: PUBLISHED

Assigner: talos

Published: 2017-09-05T18:00:00Z

Updated: 2024-09-16T17:48:57.369Z

Reserved: 2016-12-01T00:00:00

Link: CVE-2017-2870

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2017-09-05T18:29:00.600

Modified: 2025-04-20T01:37:25.860

Link: CVE-2017-2870

cve-icon Redhat

Severity : Moderate

Publid Date: 2016-09-07T00:00:00Z

Links: CVE-2017-2870 - Bugzilla