Lucene search
+L

6815 matches found

OSV
OSV
added 2022/03/28 4:23 p.m.6 views

MGASA-2022-0119 Updated libtiff packages fix security vulnerability

Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. CVE-2022-0865 A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory acces...

7.7CVSS6.5AI score0.01542EPSS
SaveExploits5References3
RedhatCVE
RedhatCVE
added 2022/03/28 10:50 a.m.42 views

CVE-2022-1115

A heap based buffer-overflow flaw was found in ImageMagick’s PushShortPixel function in quantum-private.h file. This vulnerability can be triggered by an attacker passing a specially crafted TIFF image file to ImageMagick for conversion, leading to a denial of service attack...

5.5CVSS3.3AI score0.00582EPSS
SaveExploits1References3
OSV
OSV
added 2022/03/28 12:00 a.m.31 views

CVE-2022-1056

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd...

5.5CVSS6.3AI score
SaveExploits0References7
OpenVAS
OpenVAS
added 2022/03/26 12:00 a.m.31 views

Debian: Security Advisory (DSA-5108-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.7CVSS6.9AI score0.01542EPSS
SaveExploits9References4
Debian
Debian
added 2022/03/24 6:55 p.m.108 views

[SECURITY] [DSA 5108-1] tiff security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5108-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 24, 2022 https://www.debian.org/security/faq -...

7.7CVSS7.9AI score0.01542EPSS
SaveExploits9
NCSC
NCSC
added 2022/03/24 12:00 a.m.12 views

Vulnerability fixed in IrfanView

A vulnerability has been fixed in IrfanView. The vulnerability allows a malicious party to cause a denial-of-service of the application or possibly under user privileges to cause execute arbitrary code. To do this, the malicious party needs to victim to open a rogue TIFF file. The developer has...

7.8CVSS7.2AI score0.01131EPSS
SaveExploits0
OSV
OSV
added 2022/03/24 12:00 a.m.26 views

DSA-5108-1 tiff - security update

Bulletin has no description...

7.7CVSS6.8AI score0.01542EPSS
SaveExploits9
ATTACKERKB
ATTACKERKB
added 2022/03/23 6:15 p.m.10 views

CVE-2021-46064

IrfanView 4.59 is vulnerable to buffer overflow via the function at address 0x413c70 in 32bit version of the binary. The vulnerability triggers when the user opens malicious .tiff image...

7.8CVSS7.6AI score0.01131EPSS
SaveExploits0References4
NVD
NVD
added 2022/03/23 6:15 p.m.29 views

CVE-2021-46064

IrfanView 4.59 is vulnerable to buffer overflow via the function at address 0x413c70 in 32bit version of the binary. The vulnerability triggers when the user opens malicious .tiff image...

7.8CVSS0.01131EPSS
SaveExploits0References1
OSV
OSV
added 2022/03/23 6:15 p.m.8 views

CVE-2021-46064

IrfanView 4.59 is vulnerable to buffer overflow via the function at address 0x413c70 in 32bit version of the binary. The vulnerability triggers when the user opens malicious .tiff image...

7.8CVSS7.4AI score0.01131EPSS
SaveExploits0References3
Prion
Prion
added 2022/03/23 6:15 p.m.25 views

Buffer overflow

IrfanView 4.59 is vulnerable to buffer overflow via the function at address 0x413c70 in 32bit version of the binary. The vulnerability triggers when the user opens malicious .tiff image...

6.8CVSS7.8AI score0.01131EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2022/03/23 5:05 p.m.38 views

CVE-2021-46064

IrfanView 4.59 is vulnerable to buffer overflow via the function at address 0x413c70 in 32bit version of the binary. The vulnerability triggers when the user opens malicious .tiff image...

8AI score0.01131EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/03/23 12:00 a.m.14 views

PT-2022-12543

Name of the Vulnerable Software and Affected Versions IrfanView version 4.59 Description The issue arises from a buffer overflow via the function at address 0x413c70 in the 32-bit version of the binary. This occurs when a user opens a malicious .tiff image. Recommendations For IrfanView version...

7.8CVSS7.3AI score0.01131EPSS
SaveExploits0References7
OSV
OSV
added 2022/03/19 11:04 a.m.11 views

OESA-2022-1586 libtiff security update

This provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff...

5.5CVSS6.9AI score0.01336EPSS
SaveExploits1References2
Microsoft CVE
Microsoft CVE
added 2022/03/19 7:00 a.m.9 views

Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources the fix is available with commit 408976c4.

...

5.5CVSS6.7AI score0.0133EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
added 2022/03/19 7:00 a.m.2 views

Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources the fix is available with commit f2b656e2.

...

5.5CVSS6.7AI score0.0127EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
added 2022/03/16 7:00 a.m.6 views

A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash potential information disclosure or any other context-dependent impact

...

7.1CVSS7.1AI score0.01542EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
added 2022/03/16 7:00 a.m.6 views

Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources the fix is available with commit 5e180045.

...

6.5CVSS6.7AI score0.01478EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2022/03/15 7:56 p.m.68 views

CVE-2022-0891

A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other...

7.1CVSS6AI score0.01542EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2022/03/15 8:08 a.m.59 views

CVE-2022-0907

A NULL pointer dereference flaw was found in Libtiff. This flaw allows an attacker with a crafted TIFF file to cause a crash that leads to a denial of service...

5.5CVSS5.8AI score0.0127EPSS
SaveExploits1References3
Rows per page
Query Builder