7909 matches found
CVE-2017-7594
The OJPEGReadHeaderInfoSecTablesDcTable function in tifojpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service memory leak via a crafted image...
CVE-2017-7597
tifdirread.c in LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...
CVE-2017-7601
LibTIFF 4.0.7 has a "shift exponent too large for 64-bit type long" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...
CVE-2017-7599
LibTIFF 4.0.7 has an "outside the range of representable values of type short" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...
CVE-2017-7601
LibTIFF 4.0.7 has a "shift exponent too large for 64-bit type long" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...
CVE-2017-7601
LibTIFF 4.0.7 contains a vulnerability (CVE-2017-7601) causing undefined behavior with a crafted TIFF image, leading to remote DoS (crash) and possible other impact. Connected advisories show multiple fixes across distros: e.g., Debian’s Jessie/stretch patches upgrading to 4.0.3-12.3+deb8u3 and 4...
CVE-2017-7596
LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...
CVE-2017-7593
tifread.c in LibTIFF 4.0.7 does not ensure that tifrawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image...
CVE-2017-7594
LibTIFF 4.0.7 contains CVE-2017-7594 in OJPEGReadHeaderInfoSecTablesDcTable, allowing remote crafted TIFF images to trigger a memory‑leak denial of service. Documented across multiple advisories (Debian/Ubuntu/Arch/Fedora) with fixes in later libtiff updates (upstream 4.0.7.x). Mitigation: upgrad...
CVE-2017-7592
The putagreytile function in tifgetimage.c in LibTIFF 4.0.7 has a left-shift undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...
CVE-2017-7592
CVE-2017-7592 affects LibTIFF 4.0.7 and earlier: the putagreytile() function in tif_getimage.c triggers undefined left-shift behavior when processing crafted TIFF images. This can allow a remote attacker to cause an application crash (denial of service) or potentially other effects via a speciall...
CVE-2017-7594
The OJPEGReadHeaderInfoSecTablesDcTable function in tifojpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service memory leak via a crafted image...
CVE-2017-7602
CVE-2017-7602 affects LibTIFF 4.0.7, where a signed integer overflow in TIFF handling can lead to a remote crash or other impact when processing crafted images. The vulnerability is confirmed across multiple advisories (Debian, Arch Linux, Fedora, CNVD, Alpine, etc.). Reported impact is denial of...
CVE-2017-7596
LibTIFF 4.0.7 contains an undefined behavior issue triggered by crafted TIFF images (described as “outside the range of representable values of type float”). This can lead to remote denial of service (application crash) and possibly other impacts. Several advisories reference CVE-2017-7596, notin...
CVE-2017-7595
CVE-2017-7595 affects LibTIFF 4.0.7: the JPEGSetupEncode function in tiff_jpeg.c can be exploited by a crafted TIFF image to cause a divide-by-zero error and crash the application (remote denial of service). Several advisories document this as a libtiff vulnerability and recommend upgrading to a ...
CVE-2017-7598
tifdirread.c in LibTIFF 4.0.7 might allow remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted image...
CVE-2017-7598
CVE-2017-7598 affects LibTIFF 4.0.7 where a crafted TIFF image can trigger a division-by-zero in TIFFReadDirEntryCheckedRational/TIFFReadDirEntryCheckedSrational, leading to denial of service. This is part of multiple libtiff issues reported in 2017 across distributions. The vulnerability stems f...
CVE-2017-7597
tifdirread.c in LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...
CVE-2017-7597
LibTIFF 4.0.7 contains CVE-2017-7597: an undefined behavior in tif_dirread.c triggered by crafted TIFF images, potentially allowing remote denial of service (crash). Upstream fixes exist in 4.0.7 and later; multiple advisories (Debian, Arch, Gentoo) recommend upgrading to patched versions (e.g., ...