CVE-2016-9532

Integer overflow in the writeBufferToSeparateStrips function in tiffcrop.c in LibTIFF before 4.0.7 allows remote attackers to cause a denial of service out-of-bounds read via a crafted tif file...

LibTIFF 'tif_dirread.c' Denial of Service Vulnerability

Silicon Graphics LibTIFF is a library for reading and writing TIFF Tagged Image File Format files from Silicon Graphics, USA. The library contains a number of command-line tools for processing TIFF files. A denial of service vulnerability exists in LibTIFF 'tifdirread.c', which can be exploited b...

PT-2016-7767

Name of the Vulnerable Software and Affected Versions libtiff version 4.0.6 Description The issue is related to out-of-bounds write vulnerabilities in heap allocated buffers, specifically in the tif pixarlog.c file. This can lead to a heap-buffer-overflow, which has been reported as "PixarLog...

PT-2016-7768

Name of the Vulnerable Software and Affected Versions libtiff version 4.0.6 Description The issue is related to the error code path of TIFFFlushData1 in tif write.c, which did not reset the tif rawcc and tif rawcp members, leading to a heap-buffer-overflow. Recommendations For libtiff version...

php: Memory Leakage In exif_process_IFD_in_TIFF

The exifprocessIFDinTIFF function in ext/exif/exif.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles the case of a thumbnail offset that exceeds the file size, which allows remote attackers to obtain sensitive information from process memory via a crafted TIFF image...

PT-2016-7769

Name of the Vulnerable Software and Affected Versions libtiff version 4.0.6 Description The issue is related to assertions in tif predict.h and tif predict.c that can lead to assertion failures in debug mode or buffer overflows in release mode when handling unusual tile sizes, such as YCbCr with...

PT-2017-8934

Name of the Vulnerable Software and Affected Versions libtiff versions prior to 4.0.7 Description The issue allows remote attackers to cause a denial of service crash or possibly obtain sensitive information via a negative index in a file-content buffer. This is due to a problem in the...

ALPINE-CVE-2016-3621

The LZWEncode function in tiflzw.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c lzw" option is used, allows remote attackers to cause a denial of service buffer over-read via a crafted BMP image...

PT-2016-5623

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.0.6 and earlier Description The issue allows remote attackers to cause a denial of service, specifically a divide-by-zero error, via a crafted TIFF image. This is due to a problem in the fpAcc function in tif predict.c in the...

PT-2016-2789

Name of the Vulnerable Software and Affected Versions LibTIFF versions 4.0.6 and earlier Description The issue allows a remote attacker to cause a denial of service via a crafted TIFF image. This is due to an out-of-bounds read in the tif read.c file of the tiff2bw tool in LibTIFF. Recommendation...

PT-2016-5622

Name of the Vulnerable Software and Affected Versions LibTIFF versions 4.0.6 and earlier Description The issue allows remote attackers to cause a denial of service, specifically a buffer over-read, through a crafted BMP image when the "-c lzw" option is used. This is due to a problem in the...

UBUNTU-CVE-2016-3990

Heap-based buffer overflow in the horizontalDifference8 function in tifpixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service crash or execute arbitrary code via a crafted TIFF image to tiffcp...

PT-2017-8708

Name of the Vulnerable Software and Affected Versions libtiff versions 4.0.6 and earlier Description The issue is related to an out-of-bounds read in the PixarLogCleanup function in tif pixarlog.c. This allows remote attackers to crash the application by sending a crafted TIFF image to the...

libtiff: Out-of-bounds read in tif_getimage.c

tifgetimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service out-of-bounds read via the SamplesPerPixel tag in a TIFF image...

libtiff: Out-of-bounds when reading CIE Lab image format files

The putcontig8bitCIELab function in tifgetimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service out-of-bounds read via a packed TIFF image...

libtiff: invalid assertion

tifluv.c in libtiff allows attackers to cause a denial of service out-of-bounds reads via a crafted TIFF image...

libtiff: out-of-bounds read/write with malformed TIFF image in tiff2pdf

LibTIFF 4.0.3 allows remote attackers to cause a denial of service out-of-bounds write or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by failure of tifnext.c to verify that the BitsPerSample value is 2, and the t2psamplelabsignedtounsigned function in tiff2pdf...

libtiff: out-of-bounds write in horizontalDifference8()

Heap-based buffer overflow in the horizontalDifference8 function in tifpixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service crash or execute arbitrary code via a crafted TIFF image to tiffcp...

PT-2016-5628

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.0.6 and earlier Description The issue allows remote attackers to cause a denial of service or execute arbitrary code via a crafted TIFF image. This is due to an out-of-bounds write in the TIFFVGetField function in tif...

Halliburton LogView Pro 9.7.5 - '.cgm' / '.tif' / '.tiff' / '.tifh' Crash (PoC)

Exploit Title: Haliburton LogView Pro v9.7.5 Exploit Author: Karn Ganeshen Download link: http://www.halliburton.com/public/lp/contents/InteractiveTools/web/Toolkits/lp/HalliburtonLogViewer.exe Version: Current version 9.7.5 Tested on: Windows Vista Ultimate SP2 Open cgm/tif/tiff/tifh file -...