CVE-2018-16335

newoffsets handling in ChopUpSingleUncompressedStrip in tifdirread.c in LibTIFF 4.0.9 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted TIFF file, as demonstrated by tiff2pdf. This is a...

The vulnerability of the t2p_write_pdf function in the LibTIFF library, which allows a hacker to trigger a service failure.

The vulnerability of the t2pwritepdf function tiff2pdf.c in the LibTIFF library arises due to buffer overflow in the dynamic memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure by using a specially created TIFF file...

EulerOS 2.0 SP3 : gdk-pixbuf2 (EulerOS-SA-2019-2585)

According to the versions of the gdk-pixbuf2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service segmentation fault and applicati...

Pillow -- Multiple vulnerabilities

Pillow developers report: This release addresses several security problems, as well as addressing CVE-2019-19911. CVE-2019-19911 is regarding FPX images. If an image reports that it has a large number of bands, a large amount of resources will be used when trying to process the image. This is fix...

EulerOS 2.0 SP3 : netpbm (EulerOS-SA-2019-2635)

According to the versions of the netpbm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A memory allocation vulnerability was found in netpbm before 10.61. A maliciously crafted SVG file could cause the application to...

[SECURITY] Fedora 30 Update: libtiff-4.0.10-7.fc30

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...

Debian DLA-2031-1 : freeimage security update

It was found that freeimage, a graphics library, was affected by the following two security issues : CVE-2019-12211 Heap buffer overflow caused by invalid memcpy in PluginTIFF. This flaw might be leveraged by remote attackers to trigger denial of service or any other unspecified impact via crafte...

EulerOS 2.0 SP5 : gd (EulerOS-SA-2019-2527)

According to the versions of the gd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The output function in gdgifout.c in the GD Graphics Library aka libgd allows remote attackers to cause a denial of service out-of-bounds read via a...

MGASA-2019-0355 Updated evince packages fix security vulnerability

The updated packages fix a security vulnerability: The tiffdocumentrender and tiffdocumentgetthumbnail functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented, leading to uninitialized memory use when processing certain TIFF image...

[SECURITY] Fedora 30 Update: ImageMagick-6.9.10.75-1.fc30

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

Out-of-bounds

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll TIFdecodethunderscan function of Accusoft ImageGear 19.3.0 library. A specially crafted TIFF file can cause an out of bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to t...

CVE-2019-5083

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll TIFdecodethunderscan function of Accusoft ImageGear 19.3.0 library. A specially crafted TIFF file can cause an out of bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to t...

CVE-2019-5083

CVE-2019-5083 affects Accusoft ImageGear 19.3.0: the igcore19d.dll TIF_decode_thunderscan function contains an out-of-bounds write that enables remote code execution when processing a crafted TIFF file. The TALOS advisory confirms the vulnerability in ImageGear 19.3.0 and notes a public mitigatio...

Accusoft ImageGear TIFF TIF_decode_thunderscan code execution vulnerability

Summary An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll TIFdecodethunderscan function of Accusoft ImageGear 19.3.0 library. A specially crafted TIFF file can cause an out of bounds write, resulting in a remote code execution. An attacker needs to provide a malformed...

CVE-2019-19468

Free Photo Viewer 1.3 allows remote attackers to execute arbitrary code via a crafted BMP and/or TIFF file that triggers a malformed SEH, as demonstrated by a 0012ECB4 FreePhot.00425642 42200008 corrupt entry...

CVE-2019-19468

Free Photo Viewer 1.3 allows remote attackers to execute arbitrary code via a crafted BMP and/or TIFF file that triggers a malformed SEH, as demonstrated by a 0012ECB4 FreePhot.00425642 42200008 corrupt entry...

CVE-2019-19468

Free Photo Viewer 1.3 allows remote attackers to execute arbitrary code via a crafted BMP and/or TIFF file that triggers a malformed SEH, as demonstrated by a 0012ECB4 FreePhot.00425642 42200008 corrupt entry...

CVE-2019-19468

CVE-2019-19468 affects Free Photo Viewer 1.3. A crafted BMP and/or TIFF file can trigger a malformed SEH, allowing remote attackers to execute arbitrary code. The underlying issue is SEH/corruption; exploitation is described in the entry (e.g., a corrupt entry such as FreePhot.00425642). The conn...

[SECURITY] Fedora 31 Update: ImageMagick-6.9.10.75-1.fc31

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

[SECURITY] Fedora 31 Update: libtiff-4.0.10-7.fc31

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...