Silicon Graphics LibTIFF tif_dirread.c File Denial of Service Vulnerability

Silicon Graphics LibTIFF is a library for reading and writing TIFF Tagged Image File Format files from Silicon Graphics, USA. The library contains a number of command-line tools for processing TIFF files. A security vulnerability exists in the tifdirread.c file in Silicon Graphics LibTIFF version...

DEBIAN-CVE-2017-7593

tifread.c in LibTIFF 4.0.7 does not ensure that tifrawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image...

PT-2017-17825

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.0.7 Description The issue allows remote attackers to cause a denial of service, specifically a memory leak, by providing a crafted image. This is due to a problem in the OJPEGReadHeaderInfoSecTablesDcTable function in tif...

PT-2017-17824

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.0.7 Description The issue is related to the tif read.c file in LibTIFF, where tif rawdata is not properly initialized. This could allow remote attackers to obtain sensitive information from process memory by using a crafted...

PT-2017-17828

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.0.7 Description The issue is related to an "outside the range of representable values of type float" undefined behavior in tif dirread.c, which could allow remote attackers to cause a denial of service, potentially leading to...

PT-2017-7836

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.0.7 Description The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and application crash, via a crafted TIFF image. This is related to the tif read.c file. Recommendations For...

PT-2017-7840

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.0.7 Description The issue allows remote attackers to cause a denial of service, specifically a heap-based buffer over-read, or possibly have other unspecified impacts through a crafted TIFF image. This is related to a "READ o...

PT-2017-7838

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.0.7 Description The issue allows remote attackers to cause a denial of service, potentially leading to an integer underflow and heap-based buffer under-read, via a crafted TIFF image. This is related to a "READ of size 78490"...

PT-2017-7839

Name of the Vulnerable Software and Affected Versions LibTIFF versions 4.0.0alpha4 through 4.0.7 Description The issue allows remote attackers to cause a denial of service or possibly have other impacts via a crafted TIFF image. This is related to a heap-based buffer over-read in the libtiff/tif...

LibTIFF Unexpected Termination

The vulnerability of the tifpackbits.c function in the LibTIFF library arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause an unexpected termination of the application by using a specially created BMP...

CVE-2016-9532

Integer overflow in the writeBufferToSeparateStrips function in tiffcrop.c in LibTIFF before 4.0.7 allows remote attackers to cause a denial of service out-of-bounds read via a crafted tif file...

CVE-2016-9532

Integer overflow in the writeBufferToSeparateStrips function in tiffcrop.c in LibTIFF before 4.0.7 allows remote attackers to cause a denial of service out-of-bounds read via a crafted tif file...

Integer overflow

Integer overflow in the writeBufferToSeparateStrips function in tiffcrop.c in LibTIFF before 4.0.7 allows remote attackers to cause a denial of service out-of-bounds read via a crafted tif file...

CVE-2016-9532

Integer overflow in the writeBufferToSeparateStrips function in tiffcrop.c in LibTIFF before 4.0.7 allows remote attackers to cause a denial of service out-of-bounds read via a crafted tif file...

UBUNTU-CVE-2017-5563

LibTIFF version 4.0.7 is vulnerable to a heap-based buffer over-read in tiflzw.c resulting in DoS or code execution via a crafted bmp image to tools/bmp2tiff...

UBUNTU-CVE-2016-5319

Heap-based buffer overflow in tifpackbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file...

ALPINE-CVE-2016-5316

Out-of-bounds read in the PixarLogCleanup function in tifpixarlog.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application by sending a crafted TIFF image to the rgb2ycbcr tool...

PT-2017-1216

Name of the Vulnerable Software and Affected Versions libtiff versions 4.0.6 and earlier Description The issue is caused by a heap-based buffer overflow in the tif packbits.c function of the LibTIFF library. This can be exploited by a remote attacker using a specially crafted BMP file, potentiall...

PT-2017-7841

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.0.7 Description The issue allows remote attackers to cause a denial of service, which may include a heap-based buffer over-read and buffer overflow, or possibly have other unspecified impacts. This is achieved through a craft...

PT-2016-4576

Name of the Vulnerable Software and Affected Versions LibTIFF versions 3.9.3 through 4.0.6 Description The issue is related to a heap-based buffer overflow in the readContigStripsIntoBuffer function in tif unix.c. This allows remote attackers to have an unspecified impact via a crafted image...