91 matches found
Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : tiff vulnerabilities (USN-1085-1)
Sauli Pahlman discovered that the TIFF library incorrectly handled invalid tdstripbytecount fields. If a user or automated system were tricked into opening a specially crafted TIFF image, a remote attacker could crash the application, leading to a denial of service. This issue only affected Ubunt...
USN-1085-1: tiff vulnerabilities
Sauli Pahlman discovered that the TIFF library incorrectly handled invalid tdstripbytecount fields. If a user or automated system were tricked into opening a specially crafted TIFF image, a remote attacker could crash the application, leading to a denial of service. This issue only affected Ubunt...
[ MDVSA-2010:190 ] libtiff
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:190 http://www.mandriva.com/security/ Package : libtiff Date : September 30, 2010 Affected: 2010.0, 2010.1 Problem Description: A vulnerability has been found and corrected in libtiff: libtiff allows remote...
CVE-2010-3087
LibTIFF before 3.9.2-5.2.1 in SUSE openSUSE 11.3 allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted TIFF image...
CVE-2010-3087
CVE-2010-3087 affects libTIFF prior to 3.9.2-5.2.1 in openSUSE 11.3. A crafted TIFF image can cause memory corruption, potentially enabling remote denial of service or arbitrary code execution. The vulnerability is exploitable over the network without authentication. Remediation in the connected ...
CVE-2009-3087
The vulnerability (CVE-2009-3087) affects IBM Lotus Domino 8.0 Server on Windows Server 2003, specifically the nserver.exe component in the server. It allows remote attackers to trigger a denial of service (daemon crash) via unknown vectors. The description notes actionability is limited and does...
CVE-2008-3087
Directory traversal vulnerability in Kasseler CMS 1.3.0 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter to index.php, possibly related to the phpManual module...
CVE-2008-3087
creationtimestamp| type| source ---|---|--- 2008-07-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6007...
CVE-2007-3087
Peercast is affected by CVE-2007-3087. The vulnerability arises because Pegercast places a cleartext password in a query string, enabling potential disclosure of sensitive data if an attacker can sniff network traffic or access Referer/browser history information. The connected documents confirm ...
CVE-2005-3087
The vulnerability concerns the SecureW2 3.0 TLS implementation, where the pre‑master secret (PMS) is generated using weak random number generators (rand/srand from system time). This weak RNG makes it easier for an attacker to guess the PMS and decrypt sensitive data, as described in the CVE reco...