Lucene search
+L

8092 matches found

Veracode
Veracode
•added 2020/04/10 12:11 a.m.•34 views

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. An attacker could create a malicious TIFF file in such a way that it was possible to cause an application linked with libtiff to crash or possibly execute arbitrary code...

7.5CVSS4.3AI score0.05771EPSS
SaveExploits1References47Affected Software1
Veracode
Veracode
•added 2020/04/10 12:11 a.m.•30 views

Denial Of Service (DoS)

The libtiff is vulnerable denial of service DoS. An attacker could create a carefully crafted TIFF file in such a way that it was possible to cause an application linked with libtiff to crash or possibly execute arbitrary code...

7.8CVSS4.7AI score0.02781EPSS
SaveExploits1References43Affected Software1
Veracode
Veracode
•added 2020/04/10 12:11 a.m.•32 views

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. An attacker could create a carefully crafted TIFF file in such a way that it was possible to cause an application linked with libtiff to crash or possibly execute arbitrary code...

7.5CVSS4.1AI score0.05316EPSS
SaveExploits1References51Affected Software1
Veracode
Veracode
•added 2020/04/10 12:11 a.m.•32 views

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. The vulnerability exists as an attacker could create a carefully crafted TIFF file in such a way that it was possible to cause an application linked with libtiff to crash or possibly execute arbitrary code...

7.5CVSS4.2AI score0.05316EPSS
SaveExploits1References49Affected Software1
Veracode
Veracode
•added 2020/04/10 12:11 a.m.•28 views

Heap-based Buffer Overflow

The libtiff is vulnerable to Heap-based buffer overflow. An attacker could create a carefully crafted TIFF file in such a way that it was possible to cause an application linked with libtiff to crash or possibly execute arbitrary code...

7.5CVSS4.7AI score0.0442EPSS
SaveExploits1References45Affected Software1
Veracode
Veracode
•added 2020/04/10 12:11 a.m.•25 views

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. An attacker could create a carefully crafted TIFF file in such a way that it was possible to cause an application linked with libtiff to crash or possibly execute arbitrary code...

7.5CVSS4.1AI score0.5368EPSS
SaveExploits14References51Affected Software1
Veracode
Veracode
•added 2020/04/10 12:11 a.m.•30 views

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. The vulnerability exists through a stack-based buffer overflow in the tiffsplit command in libtiff 3.8.2 and earlier might might allow attackers to execute arbitrary code via a long filename. NOTE: tiffsplit is not setuid. If there is not a commo...

7.5CVSS4.9AI score0.14415EPSS
SaveExploits1References13Affected Software1
Veracode
Veracode
•added 2020/04/10 12:10 a.m.•26 views

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. The vulnerability exists as an integer overflow flaw was discovered in libtiff. An attacker could create a carefully crafted TIFF file in such a way that it could cause an application linked with libtiff to crash or possibly execute arbitrary cod...

6.5CVSS4.3AI score0.10524EPSS
SaveExploits2References30Affected Software1
Veracode
Veracode
•added 2020/04/10 12:10 a.m.•23 views

Out-of-bounds Read

The libtiff is vulnerable to Out-of-bounds Reads. An attacker could create a carefully crafted TIFF file in such a way that it could cause an application linked with libtiff to crash...

2.1CVSS3.3AI score0.00799EPSS
SaveExploits0References21Affected Software1
Veracode
Veracode
•added 2020/04/10 12:10 a.m.•27 views

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. A double free flaw was discovered in libtiff. An attacker could create a carefully crafted TIFF file in such a way that it could cause an application linked with libtiff to crash or possibly execute arbitrary code...

6.5CVSS3.5AI score0.09742EPSS
SaveExploits2References30Affected Software1
Veracode
Veracode
•added 2020/04/10 12:10 a.m.•23 views

Denial Of Service (DoS)

The libtiff package is vulnerable to Denial of Service DoS. An attacker could create a carefully crafted TIFF file in such a way that it could cause an application linked with libtiff to crash...

4CVSS3.4AI score0.0865EPSS
SaveExploits2References31Affected Software1
RedhatCVE
RedhatCVE
•added 2020/04/08 5:24 p.m.•36 views

CVE-2016-9538

tools/tiffcrop.c in libtiff 4.0.6 reads an undefined buffer in readContigStripsIntoBuffer because of a uint16 integer overflow. Reported as MSVR 35100...

9.8CVSS3.9AI score0.03351EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2020/04/08 4:49 p.m.•36 views

CVE-2017-9935

In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2pwritepdf function in tools/tiff2pdf.c. This heap overflow could lead to different damages. For example, a crafted TIFF document can lead to an out-of-bounds read in TIFFCleanup, an invalid free in TIFFClose or t2pfree, memory...

8.8CVSS3AI score0.03918EPSS
SaveExploits1References1
Photon
Photon
•added 2020/04/08 12:00 a.m.•68 views

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0227

An update of 'libtiff', 'python2', 'bubblewrap', 'postgresql', 'yarn', 'libgcrypt', 'haproxy' packages of Photon OS has been released...

8.5CVSS0.9AI score0.60727EPSS
SaveExploits2
Photon
Photon
•added 2020/04/08 12:00 a.m.•42 views

Important Photon OS Security Update - PHSA-2020-0227

Updates of 'haproxy', 'yarn', 'libgcrypt', 'python2', 'libtiff', 'postgresql', 'bubblewrap' packages of Photon OS have been released...

8.8CVSS7.9AI score0.60727EPSS
SaveExploits1
Photon
Photon
•added 2020/04/08 12:00 a.m.•58 views

Important Photon OS Security Update - PHSA-2020-0078

Updates of 'bubblewrap', 'python3', 'python2', 'haproxy', 'yarn', 'ansible', 'libtiff', 'libvirt' packages of Photon OS have been released...

8.5CVSS1.7AI score0.60727EPSS
SaveExploits4
Photon
Photon
•added 2020/04/08 12:00 a.m.•40 views

Important Photon OS Security Update - PHSA-2020-3.0-0078

Updates of 'libtiff', 'haproxy', 'yarn', 'libvirt', 'ansible', 'python3', 'bubblewrap', 'python2' packages of Photon OS have been released...

8.8CVSS6.6AI score0.60727EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2020/04/05 10:59 a.m.•37 views

CVE-2018-5784

In LibTIFF 4.0.9, there is an uncontrolled resource consumption in the TIFFSetDirectory function of tifdir.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tif file. This occurs because the declared number of directory entries is not validated again...

6.5CVSS4.8AI score0.0296EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2020/04/03 1:54 a.m.•41 views

CVE-2018-17795

The function t2pwritepdf in tiff2pdf.c in LibTIFF 4.0.9 and earlier allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted TIFF file, a similar issue to CVE-2017-9935...

8.8CVSS6.7AI score0.04082EPSS
SaveExploits2References2
RedhatCVE
RedhatCVE
•added 2020/04/02 8:43 a.m.•38 views

CVE-2018-19210

In LibTIFF 4.0.9, there is a NULL pointer dereference in the TIFFWriteDirectorySec function in tifdirwrite.c that will lead to a denial of service attack, as demonstrated by tiffset...

6.5CVSS3.6AI score0.03613EPSS
SaveExploits1References2
Rows per page
Query Builder