Lucene search
+L

30 matches found

Talos
Talos
added 2021/02/05 12:0 a.m.126 views

Accusoft ImageGear GIF LZW decoder heap overflow vulnerability

Summary A heap overflow vulnerability exists in the way the GIF parser decodes LZW compressed streams in Accusoft ImageGear 19.8. A specially crafted malformed file can trigger a heap overflow, which can result in arbitrary code execution. An attacker can provide a malicious file to trigger this...

9.8CVSS9.1AI score0.01917EPSS
Exploits1
NVD
NVD
added 2017/02/27 9:59 p.m.17 views

CVE-2016-8387

An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a malformed PDF with an object encoded w/ multiple encoding types terminating with an LZW encoded type, an overflow may occur due to a lack of bounds checking by the LZW decoder. This can lead to code...

9.3CVSS8.3AI score0.02252EPSS
Exploits1References2
Prion
Prion
added 2017/02/27 9:59 p.m.14 views

Heap overflow

An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a malformed PDF with an object encoded w/ multiple encoding types terminating with an LZW encoded type, an overflow may occur due to a lack of bounds checking by the LZW decoder. This can lead to code...

9.3CVSS8.1AI score0.02252EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2017/02/27 9:0 p.m.25 views

CVE-2016-8387

An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a malformed PDF with an object encoded w/ multiple encoding types terminating with an LZW encoded type, an overflow may occur due to a lack of bounds checking by the LZW decoder. This can lead to code...

8.8CVSS8AI score0.02252EPSS
Exploits1References2
RedHat Linux
RedHat Linux
added 2014/02/27 6:33 p.m.6 views

(gif2tiff): GIF LZW decoder missing datasize value check

Multiple buffer overflows in libtiff before 4.0.3 allow remote attackers to cause a denial of service out-of-bounds write via a crafted 1 extension block in a GIF image or 2 GIF raster image to tools/gif2tiff.c or 3 a long filename for a TIFF image to tools/rgb2ycbcr.c. NOTE: vectors 1 and 3 are...

4.3CVSS7.5AI score0.07399EPSS
Exploits0References4
ALT Linux
ALT Linux
added 2008/08/31 12:0 a.m.44 views

Security fix for the ALT Linux 5 package libtiff version 3.8.2-alt2

Aug. 31, 2008 Dmitry V. Levin 3.8.2-alt2 - Applied patches from Drew Yao of Apple Product Security to fix potential buffer underflow in the LZW decoder CVE-2008-2327...

6.8CVSS6.6AI score0.0413EPSS
Exploits1
ALT Linux
ALT Linux
added 2008/08/31 12:0 a.m.57 views

Security fix for the ALT Linux 10 package libtiff version 3.8.2-alt2

Aug. 31, 2008 Dmitry V. Levin 3.8.2-alt2 - Applied patches from Drew Yao of Apple Product Security to fix potential buffer underflow in the LZW decoder CVE-2008-2327...

6.8CVSS6.6AI score0.0413EPSS
Exploits1
RedHat Linux
RedHat Linux
added 2008/08/28 10:23 p.m.36 views

Important: Red Hat Security Advisory: libtiff security and bug fix update

Updated libtiff packages that fix various security issues and a bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The libtiff packages contain a library of functions for manipulating Tagged...

7.5CVSS7.3AI score0.05458EPSS
Exploits2References4
NVD
NVD
added 2008/08/27 8:41 p.m.24 views

CVE-2008-2327

Multiple buffer underflows in the 1 LZWDecode, 2 LZWDecodeCompat, and 3 LZWDecodeVector functions in tiflzw.c in the LZW decoder in LibTIFF 3.8.2 and earlier allow context-dependent attackers to execute arbitrary code via a crafted TIFF file, related to improper handling of the CODECLEAR code...

6.8CVSS6.8AI score0.0413EPSS
Exploits1References47
OSV
OSV
added 2008/08/27 8:41 p.m.1 views

DEBIAN-CVE-2008-2327

Multiple buffer underflows in the 1 LZWDecode, 2 LZWDecodeCompat, and 3 LZWDecodeVector functions in tiflzw.c in the LZW decoder in LibTIFF 3.8.2 and earlier allow context-dependent attackers to execute arbitrary code via a crafted TIFF file, related to improper handling of the CODECLEAR code...

6.8CVSS8.4AI score0.0413EPSS
Exploits1References1
Rows per page
Query Builder