Debian DLA-610-2 : tiff3 regression update

Version 3.9.6-11+deb7u1 and 3.9.6-11+deb7u2 introduced changes that resulted in libtiff writing out invalid tiff files when the compression scheme in use relies on codec-specific TIFF tags embedded in the image. For Debian 7 'Wheezy', these problems have been fixed in version 3.9.6-11+deb7u3. We...

Foxit Reader < 8.0.2 Multiple Vulnerabilities

Binary data 9491.prm...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2016:2076-1)

This update for ImageMagick fixes the following issues : - security update : - CVE-2016-6520: buffer overflow bsc991872 - CVE-2016-5010: Out-of-bounds read in CopyMagickMemory bsc991444 - CVE-2016-6491: Out-of-bounds read when processing crafted tiff files bsc991445 Note that Tenable Network...

Debian DLA-606-1 : tiff security update

Several vulnerabilities were found in the tiff library, potentially causing denial of services to applications using it. For Debian 7 'Wheezy', these problems have been fixed in version 4.0.2-6+deb7u6. We recommend that you upgrade your tiff packages. NOTE: Tenable Network Security has extracted...

[SECURITY] [DLA 606-1] tiff security update

Package : tiff Version : 4.0.2-6+deb7u6 CVE ID : CVE-2016-3991 CVE-2016-5314 CVE-2016-5315 CVE-2016-5316 CVE-2016-5317 CVE-2016-5320 CVE-2016-5321 CVE-2016-5322 CVE-2016-5323 CVE-2016-5875 Several vulnerabilities were found in the tiff library, potentially causing denial of services to applicatio...

DLA-606-1 tiff - security update

Bulletin has no description...

Debian DSA-3652-1 : imagemagick - security update

This updates fixes many vulnerabilities in imagemagick: Various memory handling problems and cases of missing or incomplete input sanitising may result in denial of service or the execution of arbitrary code if malformed TIFF, WPG, RLE, RAW, PSD, Sun, PICT, VIFF, HDR, Meta, Quantum, PDB, DDS, DCM...

DSA-3652-1 imagemagick - security update

Bulletin has no description...

Debian Security Advisory DSA 3652-1 (imagemagick - security update)

This updates fixes many vulnerabilities in imagemagick: Various memory handling problems and cases of missing or incomplete input sanitising may result in denial of service or the execution of arbitrary code if malformed TIFF, WPG, RLE, RAW, PSD, Sun, PICT, VIFF, HDR, Meta, Quantum, PDB, DDS, DCM...

Foxit Reader ConvertToPDF TIFF Parsing Remote Code Execution Vulnerability

Foxit Reader is China's Foxit Foxit Software Corporation produced a small PDF document viewing and printing program, PhantomPDF is a commercial version. Foxit Reader and PhantomPDF 8.0.0.624, as well as earlier versions of the ConvertToPDF plug-in has a security vulnerability that can be triggere...

Internet Bug Bounty: Memory Leakage In exif_process_IFD_in_TIFF (CVE-2016-7128)

I found some vulnerable code that leads to the memory leak in exifprocessIFDinTIFF. Let take look at code chunk : if !ImageInfo-Thumbnail.data && ImageInfo-Thumbnail.offset && ImageInfo-Thumbnail.size && ImageInfo-readthumbnail ImageInfo-Thumbnail.data = safeemallocImageInfo-Thumbnail.size, 1, 0;...

openSUSE Security Update : ImageMagick (openSUSE-2016-983)

This update for ImageMagick fixes the following issues : - security update : - CVE-2016-6520: buffer overflow bsc991872 - CVE-2016-5010: Out-of-bounds read in CopyMagickMemory bsc991444 - CVE-2016-6491: Out-of-bounds read when processing crafted tiff files bsc991445 %NASLMINLEVEL 70300 C Tenable...

Foxit Reader ConvertToPDF TIFF Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the ConvertToPDF...

Foxit Reader ConvertToPDF TIFF Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the ConvertToPDF...

Foxit Reader TIFF Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within TIFF Parsing. The...

Foxit Reader < 7.2 Multiple RCE

Binary data 9458.prm...

Halliburton LogView Pro Handles TIFF File Memory Corruption Vulnerability

Halliburton LogView Pro is a program developed by Halliburton.Halliburton LogView Pro supports CGM and TIFF viewing as a stand-alone viewer or as a plug-in for ie... A memory corruption vulnerability exists in the Halliburton LogView Pro software when processing TIFF images, which could be...

Silicon Graphics LibTIFF Information Disclosure Vulnerability

Silicon Graphics LibTiff is a library for reading and writing TIFF Tagged Image File Format files from the U.S. company Silicon Graphics. The library contains a number of command-line tools to deal with TIFF files. An information disclosure vulnerability exists in the libtiff/tifread.c file in...

Oracle Linux 6 : libtiff (ELSA-2016-1547)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1547 advisory. - Update patch for CVE-2014-8127 - Fix patches for CVE-2016-3990 and CVE-2016-5320 - CVE-2016-3632 CVE-2016-3945 CVE-2016-3990 - CVE-2016-3991...

libtiff: out-of-bounds write in loadImage() function

Heap-based buffer overflow in the loadImage function in the tiffcrop tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds write or execute arbitrary code via a crafted TIFF image with zero tiles...