6888 matches found
Foxit Reader TIFF Conversion Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion of...
CVE-2015-5782
CVE-2015-5782 concerns ImageIO in Apple iOS prior to 8.4.1 and OS X prior to 10.10.5. The root cause is an uninitialized (unspecified) data structure in TIFF handling, which permits remote attackers to disclose sensitive information from a process’s memory by supplying a crafted TIFF image. The d...
CVE-2015-5782
ImageIO in Apple iOS before 8.4.1 and OS X before 10.10.5 does not properly initialize an unspecified data structure, which allows remote attackers to obtain sensitive information from process memory via a crafted TIFF image...
CVE-2015-5758
ImageIO in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted TIFF image...
SUSE-SU-2015:1420-1 Security update for tiff
tiff was updated to fix six security issues found by fuzzing initiatives. These security issues were fixed: - CVE-2014-8127: Out-of-bounds write bnc914890. - CVE-2014-8128: Out-of-bounds write bnc914890. - CVE-2014-8129: Out-of-bounds write bnc914890. - CVE-2014-8130: Out-of-bounds write bnc91489...
Adobe Acrobat and Reader Integer Overflow (APSB15-15: CVE-2015-5097)
An integer overflow vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to an error in Adobe Acrobat while parsing a specially crafted TIFF file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted TIFF file...
openSUSE Security Update : tiff (openSUSE-2015-476)
tiff was updated to version 4.0.4 to fix six security issues found by fuzzing initiatives. These security issues were fixed : - CVE-2014-8127: Out-of-bounds write bnc914890. - CVE-2014-9655: Access of uninitialized memory bnc916927. - CVE-2014-8130: Out-of-bounds write bnc914890. - CVE-2015-1547:...
php: Free called on unitialized pointer in exif.c
An uninitialized pointer use flaw was found in PHP's Exif extension. A specially crafted JPEG or TIFF file could cause a PHP application using the exifreaddata function to crash or, possibly, execute arbitrary code with the privileges of the user running that PHP application...
CVE-2015-3703
ImageIO in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted TIFF image...
Memory corruption
ImageIO in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted TIFF image...
CVE-2015-3703
ImageIO in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted TIFF image...
CVE-2015-3703
CVE-2015-3703 affects ImageIO in Apple iOS < 8.4 and OS X
F5 Networks BIG-IP : Multiple LibTIFF vulnerabilities (K16715)
CVE-2013-1960 Heap-based buffer overflow in the t2pprocessjpegstrip function in tiff2pdf in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted TIFF image file. CVE-2013-1961 Stack-based buffer overflow in the...
php: Free called on unitialized pointer in exif.c
An uninitialized pointer use flaw was found in PHP's Exif extension. A specially crafted JPEG or TIFF file could cause a PHP application using the exifreaddata function to crash or, possibly, execute arbitrary code with the privileges of the user running that PHP application...
[SECURITY] Fedora 22 Update: libtiff-4.0.3-20.fc22
The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...
Scientific Linux Security Update : libtiff on SL5.x, SL6.x i386/x86_64 (20120703)
The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. libtiff did not properly convert between signed and unsigned integer values, leading to a buffer overflow. An attacker could use this flaw to create a specially crafted TIFF file that, when...
[SECURITY] Fedora 21 Update: libtiff-4.0.3-20.fc21
The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...
Debian DSA-3273-1 : tiff - security update
William Robinet and Michal Zalewski discovered multiple vulnerabilities in the TIFF library and its tools, which may result in denial of service or the execution of arbitrary code if a malformed TIFF file is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
[SECURITY] [DSA 3273-1] tiff security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3273-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 25, 2015 http://www.debian.org/security/faq -...