CVE-2016-5102

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Buffer overflow in the readgifimage function in gif2tiff.c in the gif2tiff tool in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (segmentation fault) via a crafted gif file.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://bugzilla.maptools.org/show_bug.cgi?id=2552Issue Tracking, Third Party Advisory
http://www.securityfocus.com/bid/96049Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1343407Issue Tracking, Third Party Advisory
https://security.gentoo.org/glsa/201701-16Third Party Advisory
https://usn.ubuntu.com/3606-1/
http://bugzilla.maptools.org/show_bug.cgi?id=2552Issue Tracking, Third Party Advisory
http://www.securityfocus.com/bid/96049Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1343407Issue Tracking, Third Party Advisory
https://security.gentoo.org/glsa/201701-16Third Party Advisory
https://usn.ubuntu.com/3606-1/

Timeline

Published: Feb 6, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-51045.3The socket_create function in common/socket.c in libimobiledevice and libusbmuxd allows remote attackers to bypass intended access restricti CVE-2016-51054.4The megasas_dcmd_cfg_read function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, us CVE-2016-51066.0The megasas_dcmd_set_properties function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation suppo CVE-2016-51076.0The megasas_lookup_frame function in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS ad CVE-2016-51089.8Buffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN VLC media player before 2.2.4 allows remote attackers CVE-2016-51094.3Citrix Worx Home for iOS before 10.3.6 and XenMobile MDX Toolkit for iOS before 10.3.6 might allow physically proximate attackers to bypass CVE-2016-51149.1sapi/fpm/fpm/fpm_log.c in PHP before 5.5.31, 5.6.x before 5.6.17, and 7.x before 7.0.2 misinterprets the semantics of the snprintf return va CVE-2016-51155.5The avcodec_decode_audio4 function in libavcodec in libavformat 57.34.103, as used in MPlayer, allows remote attackers to cause a denial of CVE-2016-51169.1gd_xbm.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in certain custom PHP 5.5.x configurations, allows context-dependent a CVE-2016-51175.9OpenNTPD before 6.0p1 does not validate the CN for HTTPS constraint requests, which allows remote attackers to bypass the man-in-the-middle CVE-2016-51189.8The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (p CVE-2016-51197.5The automatic update feature in KeePass 2.33 and earlier allows man-in-the-middle attackers to execute arbitrary code by spoofing the versio