Security fix for the ALT Linux 5 package libtiff version 3.8.2-alt5

July 15, 2009 Dmitry V. Levin 3.8.2-alt5 - tiff2rgba, rgb2ycbcr: Fixed potential integer overflows in buffer size calculations CVE-2009-2347; closes: 20774...

Security fix for the ALT Linux 10 package libtiff version 3.8.2-alt5

July 15, 2009 Dmitry V. Levin 3.8.2-alt5 - tiff2rgba, rgb2ycbcr: Fixed potential integer overflows in buffer size calculations CVE-2009-2347; closes: 20774...

CVE-2009-2347

Multiple integer overflows in inter-color spaces conversion tools in libtiff 3.8 through 3.8.2, 3.9, and 4.0 allow context-dependent attackers to execute arbitrary code via a TIFF image with large 1 width and 2 height values, which triggers a heap-based buffer overflow in the a cvtwholeimage...

CVE-2009-2347

Multiple integer overflows in inter-color spaces conversion tools in libtiff 3.8 through 3.8.2, 3.9, and 4.0 allow context-dependent attackers to execute arbitrary code via a TIFF image with large 1 width and 2 height values, which triggers a heap-based buffer overflow in the a cvtwholeimage...

DEBIAN-CVE-2009-2347

Multiple integer overflows in inter-color spaces conversion tools in libtiff 3.8 through 3.8.2, 3.9, and 4.0 allow context-dependent attackers to execute arbitrary code via a TIFF image with large 1 width and 2 height values, which triggers a heap-based buffer overflow in the a cvtwholeimage...

Integer overflow

Multiple integer overflows in inter-color spaces conversion tools in libtiff 3.8 through 3.8.2, 3.9, and 4.0 allow context-dependent attackers to execute arbitrary code via a TIFF image with large 1 width and 2 height values, which triggers a heap-based buffer overflow in the a cvtwholeimage...

CVE-2009-2347

Multiple integer overflows in inter-color spaces conversion tools in libtiff 3.8 through 3.8.2, 3.9, and 4.0 allow context-dependent attackers to execute arbitrary code via a TIFF image with large 1 width and 2 height values, which triggers a heap-based buffer overflow in the a cvtwholeimage...

CVE-2009-2347

CVE-2009-2347 affects libtiff 3.8 through 4.0, where multiple integer overflows in inter-color spaces conversion tools enable context-dependent attackers to trigger a heap-based buffer overflow via TIFF images with large width/height. The overflow occurs in cvt_whole_image (tiff2rgba) and tiffcvt...

CVE-2009-2347

Multiple integer overflows in inter-color spaces conversion tools in libtiff 3.8 through 3.8.2, 3.9, and 4.0 allow context-dependent attackers to execute arbitrary code via a TIFF image with large 1 width and 2 height values, which triggers a heap-based buffer overflow in the a cvtwholeimage...

CVE-2009-2347

Multiple integer overflows in inter-color spaces conversion tools in libtiff 3.8 through 3.8.2, 3.9, and 4.0 allow context-dependent attackers to execute arbitrary code via a TIFF image with large 1 width and 2 height values, which triggers a heap-based buffer overflow in the a cvtwholeimage...

Mandriva Linux Security Advisory : libtiff (MDVSA-2009:150)

Multiple vulnerabilities has been found and corrected in libtiff : Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial of service crash via a crafted TIFF image, a different vulnerability than CVE-2008-2327 CVE-2009-2285. Fix...

LibTIFF库tiff2rgba和rgb2ycbcr转换工具整数溢出漏洞

BUGTRAQ ID: 35652 CVECAN ID: CVE-2009-2347 LibTiff是负责对TIFF图象格式进行编码/解码的应用库。 libtiff软件把中捆绑了一些用于操控TIFF图形的工具集，其中tiff2rgba工具所使用的cvtwholeimage函数和 rgb2ycbcr工具所使用的tiffcvt函数没有正确地验证图形的宽度和高度，在使用宽度和高度值计算raster缓冲区大小时可能出现最终可导致堆溢出的整数溢出漏洞。如果用户受骗打开了畸形的TIFF图形就可以触发这个溢出，导致转换工具崩溃或执行任意代码。 LibTIFF LibTIFF 4.0 LibTIFF...

[oCERT-2009-012] libtiff tools integer overflows

2009-012 libtiff tools integer overflows Description: The libtiff image library tools suffer from integer overflows which may lead to a potentially exploitable heap overflow and result in arbitrary code execution. The libtiff package ships a library, for reading and writing TIFF, as well as a sma...

libtiff multiple security vulnerabilities

Crash on LZWDecodeCompat. Potantial integer overflows in tiff2rgba and rgb2ycbcr...

LibTIFF TIFF Image Buffer Underflow Vulnerability

LibTIFF is prone to buffer underflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

LibTIFF TIFF Image Buffer Underflow Vulnerability

This host is installed with LibTIFF and is prone to buffer underflow vulnerability. OpenVAS Vulnerability Test $Id: gblibtiffbufvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ LibTIFF TIFF Image Buffer Underflow Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : tiff vulnerability (USN-797-1)

It was discovered that the TIFF library did not correctly handle certain malformed TIFF images. If a user or automated system were tricked into processing a malicious image, a remote attacker could cause an application linked against libtiff to crash, leading to a denial of service. Note that...

USN-797-1: tiff vulnerability

It was discovered that the TIFF library did not correctly handle certain malformed TIFF images. If a user or automated system were tricked into processing a malicious image, a remote attacker could cause an application linked against libtiff to crash, leading to a denial of service...

Fedora Core 9 FEDORA-2009-7335 (libtiff)

The remote host is missing an update to libtiff announced via advisory FEDORA-2009-7335. OpenVAS Vulnerability Test $Id: fcore20097335.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7335 libtiff Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 9 FEDORA-2009-7335 (libtiff)

The remote host is missing an update to libtiff announced via advisory FEDORA-2009-7335. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...