CVE-2016-9453

CVE-2016-9453 affects the LibTIFF library. The vulnerability is in the t2p_readwrite_pdf_image_tile function, which allows a remote attacker to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code by processing a JPEG file with a TIFFTAG_JPEGTABLES of lengt...

[SECURITY] [DSA 3762-1] tiff security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3762-1 [email protected] https://www.debian.org/security/ Laszlo Boszormenyi GCS January 13, 2017 https://www.debian.org/security/faq -...

SUSE SLED12 / SLES12 Security Update : tiff (SUSE-SU-2016:3301-1)

The tiff library and tools were updated to version 4.0.7 fixing various bug and security issues. - CVE-2014-8127: out-of-bounds read with malformed TIFF image in multiple tools bnc914890 - CVE-2016-9297: tifdirread.c read outside buffer in TIFFPrintField bnc1010161 - CVE-2016-3658: Illegal read i...

MGASA-2016-0405 Updated libtiff packages fix security vulnerability

The updated packages fix: - A regression introduced by the fix for CVE-2016-9297 CVE-2016-9448. - An out-of-bounds Write memcpy and less bound check in tiff2pdf CVE-2016-9453...

CVE-2014-9453

The CVE-2014-9453 entry concerns multiple cross-site scripting (XSS) flaws in the Simple visitor stat WordPress plugin, specifically in simple-visitor-stat.php. The vulnerabilities allow remote attackers to inject arbitrary web script or HTML through the HTTP User-Agent or HTTP Referer headers. T...