Silicon Graphics LibTiff bmp2tiff tool denial of service vulnerability (CNVD-2016-02092)

Silicon Graphics LibTiff is a library for reading and writing TIFF files. The library contains some command line tools for working with TIFF files. A denial of service vulnerability in the 'ZIPEncode' function in the tifzip.c file in Silicon Graphics LibTiff's bmp2tiff tool allows an attacker to...

Silicon Graphics LibTiff tiff2rgba Tool Removes Zero Error Vulnerability

Silicon Graphics LibTiff is a library for reading and writing TIFF Tagged Image File Format files from the U.S. company Silicon Graphics. The library contains a number of command-line tools to deal with TIFF files. A divide-by-zero error vulnerability exists in the 'fpAcc' function in the...

Debian Security Advisory DSA 3546-1 (optipng - security update)

Hans Jerry Illikainen discovered that missing input sanitising in the BMP processing code of the optipng PNG optimiser may result in denial of service or the execution of arbitrary code if a malformed file is processed. OpenVAS Vulnerability Test $Id: deb3546.nasl 6608 2017-07-07 12:05:05Z cfisch...

SUSE-SU-2016:0935-1 Security update for python-Pillow

This update for python-Pillow fixes the following security issues: CVE-2016-0775: Fixed a buffer overflow in FliDecode.c causing a segfault when opening FLI files. bsc965582 CVE-2016-0740: Fixed a buffer overflow in TiffDecode.c causing an arbitrary amount of memory to be overwritten when opening...

SUSE-SU-2016:0924-1 Security update for python-Pillow

This update for python-Pillow fixes the following security issues: Fixed an integer overflow in Resample.c causing writes in the Python heap. Fixed a buffer overflow in PcdDecode.c causing a segfault when opening PhotoCD files. CVE-2016-TBD Fixed a buffer overflow in FliDecode.c causing a segfaul...

Ubuntu: Security Advisory (USN-2939-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the FFmpeg multimedia library, which allows a intruder to trigger a service failure or cause other effects

The vulnerability in the libavcodec/tiff.c function of the FFmpeg multimedia library arises from buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure such as inability to read data outside the array bounds or have other effects by using a specially creat...

openSUSE Security Update : python-Pillow (openSUSE-2016-339)

This update for python-Pillow fixes the following issues : - backport security fixes from 3.1.1 Pillow-overflows.patch : - Fixed an integer overflow in Resample.c causing writes in the Python heap. - Fixed a buffer overflow in PcdDecode.c causing a segfault when opening PhotoCD files. CVE-2016-TB...

The vulnerability of the LibTIFF library, which allows a hacker to trigger a service failure

The vulnerability in the tifluv.c function of the LibTIFF library arises due to buffer overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure memory-bound reading by using a specially crafted TIFF image...

The vulnerability of the LibTIFF library, which allows a hacker to trigger a service failure

The vulnerability in the tifluv.c function of the LibTIFF library arises due to buffer overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure logging outside the buffer’s limit by using an improperly compressed TIFF image...

The vulnerability of the LibTIFF library, which allows a hacker to trigger a service failure

The vulnerability in the tifluv.c function of the LibTIFF library arises due to buffer overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure logging out of the buffer limit using a specially crafted TIFF image...

Debian: Security Advisory (DSA-3499-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 3499-1 (pillow - security update)

Multiple security vulnerabilities have been found in Pillow, a Python imaging library, which may result in denial of service or the execution of arbitrary code if a malformed FLI, PCD or Tiff files is processed. OpenVAS Vulnerability Test $Id: deb3499.nasl 6608 2017-07-07 12:05:05Z cfischer $...

Debian DSA-3499-1 : pillow - security update

Multiple security vulnerabilities have been found in Pillow, a Python imaging library, which may result in denial of service or the execution of arbitrary code if a malformed FLI, PCD or Tiff files is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

openSUSE Security Update : ffmpeg (openSUSE-2016-246)

This update to ffmpeg 2.8.6 fixes the following issues : - CVE-2016-2329: Remote DoS via crafted TIFF files boo966674 VLC was updated to 2.8.6, containing various other upstream bugfixes. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

FFmpeg Denial of Service Vulnerability (CNVD-2016-01131)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the libavcodec/tiff.c file in FFmpeg versions prior to 2.8.6, which stems from the program failing to properly validate the RowsPerStrip value and the...

MGASA-2016-0066 Updated python-pillow packages fix security vulnerability

A buffer overflow in TiffDecode.c causing an arbitrary amount of memory to be overwritten when opening a specially crafted invalid TIFF file CVE-2016-0740. A buffer overflow in FliDecode.c causing a segfault when opening FLI files CVE-2016-0775. A buffer overflow in PcdDecode.c causing a segfault...

Updated python-pillow packages fix security vulnerability

A buffer overflow in TiffDecode.c causing an arbitrary amount of memory to be overwritten when opening a specially crafted invalid TIFF file CVE-2016-0740. A buffer overflow in FliDecode.c causing a segfault when opening FLI files CVE-2016-0775. A buffer overflow in PcdDecode.c causing a segfault...

CVE-2016-2329

libavcodec/tiff.c in FFmpeg before 2.8.6 does not properly validate RowsPerStrip values and YCbCr chrominance subsampling factors, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via a crafted TIFF file, related to th...

CVE-2016-2329

libavcodec/tiff.c in FFmpeg before 2.8.6 does not properly validate RowsPerStrip values and YCbCr chrominance subsampling factors, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via a crafted TIFF file, related to th...