Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : tiff vulnerabilities (USN-1085-1)

Sauli Pahlman discovered that the TIFF library incorrectly handled invalid tdstripbytecount fields. If a user or automated system were tricked into opening a specially crafted TIFF image, a remote attacker could crash the application, leading to a denial of service. This issue only affected Ubunt...

USN-1085-1: tiff vulnerabilities

Sauli Pahlman discovered that the TIFF library incorrectly handled invalid tdstripbytecount fields. If a user or automated system were tricked into opening a specially crafted TIFF image, a remote attacker could crash the application, leading to a denial of service. This issue only affected Ubunt...

Mandriva Linux Security Advisory : libtiff (MDVSA-2010:146)

Multiple vulnerabilities has been discovered and corrected in libtiff : The TIFFYCbCrtoRGB function in LibTIFF 3.9.0 and 3.9.2, as used in ImageMagick, does not properly handle invalid ReferenceBlackWhite values, which allows remote attackers to cause a denial of service application crash via a...

CVE-2010-2482

CVE-2010-2482 affects libTIFF up to version 3.9.4, where an invalid td_stripbytecount field in a TIFF file can cause a NULL pointer dereference and application crash (remote DoS) when processing the image. This is part of a set of libTIFF issues described in multiple advisories (e.g., Debian DSA-...

CVE-2009-2482

The vulnerability CVE-2009-2482 affects the pam_unix module in OpenPAM used by NetBSD 4.0 up to 4.0.2 and NetBSD 5.0 up to 5.0.1. The underlying issue allows a local user to change the current root password if it is already known, even when the user is not in the wheel group. This is a local-acce...

CVE-2008-2482

CVE-2008-2482 affects OneCMS 2.5 from insanevisions via a directory traversal in install_mod.php. The load parameter in the go action can be manipulated with .. to include and execute arbitrary local files. The NVD entry lists a CVSSv2 base score of 7.5 (HIGH) with network access, low attack comp...

CVE-2008-2482

creationtimestamp| type| source ---|---|--- 2008-05-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5669...

CVE-2007-2482

Directory traversal vulnerability in wordtube-button.php in the wordTube 1.43 and earlier plugin for WordPress, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the wpPATH parameter...

CVE-2007-2482

The WordPress plugin wordTube (

CVE-2006-2482

Heap-based buffer overflow in the TZipTV component in 1 ZipTV for Delphi 7 2006.1.26 and for C++ Builder 2006-1.16, 2 PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221, and possibly other products, allows user-assisted attackers to execute arbitrary code via an ARJ archive with a long header. NOTE:...

CVE-2006-2482

CVE-2006-2482 describes a heap-based buffer overflow in the TZipTV component used by ZipTV for Delphi 7, and by PentaZip/PentaSuite-PRO, triggered by an ARJ archive with a long header. This vulnerability allows user-assisted attackers to execute arbitrary code. The ACE-archive vector is noted as ...

CVE-2004-2482

Microsoft Outlook 2000 and 2003, when configured to use Word 2000/2003 as the e‑mail editor, is vulnerable to remote code execution via an improperly closed OBJECT tag in forwarded messages. The issue occurs because Outlook may automatically download the URI in the data property of the OBJECT tag...

CVE-2005-2482

CVE-2005-2482 affects Metasploit Framework 2.4 and earlier (msfweb StateToOptions). The vulnerability occurs when running with -D (defanged mode): an attacker could modify temporary environment variables before the _Defanged check is performed while processing the Exploit command. NVD lists a Bas...

CVE-2005-2482

The StateToOptions function in msfweb in Metasploit Framework 2.4 and earlier, when running with the -D option defanged mode, allows attackers to modify temporary environment variables before the "Defanged" environment option is checked when processing the Exploit command...