Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Pillow vulnerabilities (USN-4697-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4697-1 advisory. It was discovered that Pillow incorrectly handled certain PCX image files. If a user or automated system were tricked into openin...

DEBIAN-CVE-2020-35654

In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode...

PYSEC-2021-70

In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode...

UBUNTU-CVE-2020-35654

In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode...

Pillow Buffer Overflow Vulnerability

Pillow is a Python based image processing library. A buffer overflow vulnerability in versions of Pillow prior to 8.1.0 causes a heap-based buffer overflow in TiffDecode when decoding specially crafted YCbCr files due to certain interpretations conflicting with LibTIFF in RGBA mode. An attacker...

UBUNTU-CVE-2020-35523

An integer overflow flaw was found in libtiff that exists in the tifgetimage.c file. This flaw allows an attacker to inject and execute arbitrary code when a user opens a crafted TIFF file. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

CVE-2020-35523

An integer overflow flaw was found in libtiff that exists in the tifgetimage.c file. This flaw allows an attacker to inject and execute arbitrary code when a user opens a crafted TIFF file. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

Huawei EulerOS: Security Advisory for evince (EulerOS-SA-2020-2542)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : evince (EulerOS-SA-2020-2542)

According to the version of the evince packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The tiffdocumentrender and tiffdocumentgetthumbnail functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors fro...

SUSE SLED15 / SLES15 Security Update : tiff (SUSE-SU-2020:2744-1)

This update for tiff fixes the following issues : CVE-2019-14973: Fixed an improper check which was depended on the compiler which could have led to integer overflow bsc1146608. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

NewStart CGSL CORE 5.04 / MAIN 5.04 : evince Vulnerability (NS-SA-2020-0058)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has evince packages installed that are affected by a vulnerability: - The tiffdocumentrender and tiffdocumentgetthumbnail functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from...

NewStart CGSL CORE 5.05 / MAIN 5.05 : evince Vulnerability (NS-SA-2020-0089)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has evince packages installed that are affected by a vulnerability: - The tiffdocumentrender and tiffdocumentgetthumbnail functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from...

CVE-2020-25667

CVE-2020-25667 affects ImageMagick versions prior to 7.0.9-0. The vulnerability arises in TIFFGetProfiles() in /coders/tiff.c, where a misused strstr() can cause a large out-of-bounds read while locating the string dc:format="image/dng" in a profile, provided a crafted input file is processed. Th...

ImageMagick Studio ImageMagick 代码问题漏洞

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in ImageMagick versions prior to 7.0.9-0, which stems...

Denial Of Service (DoS)

exiv2 is vulnerable to denial of service. The vulnerability exists due to a flaw in TiffImageEntry::doWriteImage of pValue which allows an attacker to crash the application by tricking a user into opening a malicious tiff file...

EulerOS 2.0 SP9 : jbigkit (EulerOS-SA-2020-2484)

According to the version of the jbigkit package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In LibTIFF 4.0.8, there is a memory malloc failure in tifjbig.c. A crafted TIFF document can lead to an abort resulting in a remote denial of servi...

Internet Bug Bounty: Heap buffer overflow vulnerability while processing a malformed TIFF file.

A heap buffer overflow vulnerability occurs in magick while processing of a malformed TIFF file.Following is the version/build details: $ magick -version Version: ImageMagick 7.0.10-45 Q16 x8664 2020-11-30 https://imagemagick.org Copyright: © 1999-2020 ImageMagick Studio LLC License:...

openSUSE: Security Advisory for tiff (openSUSE-SU-2020:1840-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : tiff (openSUSE-2020-1840)

This update for tiff fixes the following issues : - CVE-2019-14973: Fixed an improper check which was depended on the compiler which could have led to integer overflow bsc1146608. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive...

OPENSUSE-SU-2020:1840-1 Security update for tiff

This update for tiff fixes the following issues: - CVE-2019-14973: Fixed an improper check which was depended on the compiler which could have led to integer overflow bsc1146608. This update was imported from the SUSE:SLE-15:Update update project...