7927 matches found
CVE-2017-7596
LibTIFF 4.0.7 contains an undefined behavior issue triggered by crafted TIFF images (described as “outside the range of representable values of type float”). This can lead to remote denial of service (application crash) and possibly other impacts. Several advisories reference CVE-2017-7596, notin...
CVE-2017-7593
LibTIFF 4.0.7 contains a vulnerability in tif_read.c where tif_rawdata may not be properly initialized, enabling a remote attacker to leak sensitive process memory via a crafted TIFF image. Connected advisories show upstream fixes implemented in LibTIFF 4.0.7 and distribution patches in Debian, A...
CVE-2017-7600
LibTIFF 4.0.7 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...
CVE-2017-7600
CVE-2017-7600 : A vulnerability in libtiff 4.0.7 and earlier allows a crafted TIFF image to trigger undefined behavior in TIFF handling (e.g., putgreytile/TIFFReadDirEntryCheckedRational), potentially causing a denial of service (application crash). Affected products/version ranges are reported a...
CVE-2017-7602
LibTIFF 4.0.7 has a signed integer overflow, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...
CVE-2017-7599
CVE-2017-7599 affects LibTIFF up to version 4.0.7, where a crafted TIFF file can trigger undefined behavior (via putagreytile/related paths) and cause a denial of service (application crash). Public advisories and vendor posts indicate this class of issues covered multiple CVEs in LibTIFF and wer...
CVE-2017-7595
The JPEGSetupEncode function in tiffjpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted image...
CVE-2017-7593
tifread.c in LibTIFF 4.0.7 does not ensure that tifrawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image...
CVE-2017-7598
tifdirread.c in LibTIFF 4.0.7 might allow remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted image...
CVE-2017-7602
LibTIFF 4.0.7 has a signed integer overflow, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...
CVE-2017-7596
LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...
CVE-2017-7599
LibTIFF 4.0.7 has an "outside the range of representable values of type short" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...
CVE-2017-7600
LibTIFF 4.0.7 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...
CVE-2017-7593
tifread.c in LibTIFF 4.0.7 does not ensure that tifrawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image...
CVE-2017-7602
LibTIFF 4.0.7 has a signed integer overflow, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...
CVE-2017-7593
tifread.c in LibTIFF 4.0.7 does not ensure that tifrawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image...
CVE-2017-7595
The JPEGSetupEncode function in tiffjpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted image...
UBUNTU-CVE-2017-7601
LibTIFF 4.0.7 has a "shift exponent too large for 64-bit type long" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...