7906 matches found
CVE-2016-9539
tools/tiffcrop.c in libtiff 4.0.6 has an out-of-bounds read in readContigTilesIntoBuffer. Reported as MSVR 35092...
CVE-2016-9533
tifpixarlog.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers. Reported as MSVR 35094, aka "PixarLog horizontalDifference heap-buffer-overflow."...
CVE-2016-9534
CVE-2016-9534 affects libtiff 4.0.6 where TIFFFlushData1() in tif_write.c does not reset tif_rawcc/tif_rawcp on the error path, creating a heap-buffer-overflow condition. Upstream and multiple advisories document this as a heap-based overflow that can enable DoS or potentially arbitrary code exec...
CVE-2016-9537
CVE-2016-9537 is an out-of-bounds write in LibTIFF 4.0.6 (tools/tiffcrop.c) used when processing TIFF images, with potential for denial of service or arbitrary code execution. Multiple vendor advisories (Debian DLA-795-1, CentOS/RH updates, Ubuntu USN-3212-1, Arch ASA-201611-26/27, ASA) indicate ...
CVE-2016-9536
tools/tiff2pdf.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers in t2pprocessjpegstrip. Reported as MSVR 35098, aka "t2pprocessjpegstrip heap-buffer-overflow."...
CVE-2016-9537
tools/tiffcrop.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in buffers. Reported as MSVR 35093, MSVR 35096, and MSVR 35097...
CVE-2016-9535
CVE-2016-9535 affects libtiff 4.0.6 (tif_predict.h/.c) and can trigger assertion failures in debug builds or buffer overflows in release builds when handling unusual tiles (e.g., YCbCr with subsampling). Several connected advisories confirm heap-buffer-overflow risks in LibTIFF 4.0.6 components (...
CVE-2016-9534
tifwrite.c in libtiff 4.0.6 has an issue in the error code path of TIFFFlushData1 that didn't reset the tifrawcc and tifrawcp members. Reported as MSVR 35095, aka "TIFFFlushData1 heap-buffer-overflow."...
CVE-2016-9538
tools/tiffcrop.c in libtiff 4.0.6 reads an undefined buffer in readContigStripsIntoBuffer because of a uint16 integer overflow. Reported as MSVR 35100...
CVE-2016-9535
tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual tile size like YCbCr with subsampling. Reported as MSVR 35105, aka "Predictor heap-buffer-overflow."...
CVE-2016-9540
tools/tiffcp.c in libtiff 4.0.6 has an out-of-bounds write on tiled images with odd tile width versus image width. Reported as MSVR 35103, aka "cpStripToTile heap-buffer-overflow."...
CVE-2016-9538
CVE-2016-9538 is a LibTIFF/tiffcrop issue; LibTIFF 4.0.6’s tools/tiffcrop.c reads an undefined buffer in readContigStripsIntoBuffer due to a uint16 overflow (MSVR 35100). The EulerOS/Nessus entries list this CVE among LibTIFF-related problems and confirm the affected component and function, but t...
CVE-2016-9540
tools/tiffcp.c in libtiff 4.0.6 has an out-of-bounds write on tiled images with odd tile width versus image width. Reported as MSVR 35103, aka "cpStripToTile heap-buffer-overflow."...
CVE-2016-9534
tifwrite.c in libtiff 4.0.6 has an issue in the error code path of TIFFFlushData1 that didn't reset the tifrawcc and tifrawcp members. Reported as MSVR 35095, aka "TIFFFlushData1 heap-buffer-overflow."...
CVE-2016-9537
tools/tiffcrop.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in buffers. Reported as MSVR 35093, MSVR 35096, and MSVR 35097...
CVE-2016-9536
tools/tiff2pdf.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers in t2pprocessjpegstrip. Reported as MSVR 35098, aka "t2pprocessjpegstrip heap-buffer-overflow."...
DLA-716-1 tiff - security update
Bulletin has no description...
LibTIFF 'tiff2pdf.c' Denial of Service Vulnerability
Silicon Graphics LibTIFF is a library for reading and writing TIFF Tagged Image File Format files from Silicon Graphics, USA. The library contains a number of command-line tools for processing TIFF files. A denial of service vulnerability exists in LibTIFF 'tiff2pdf.c', which can be exploited by ...