CVE-2017-3049

Technical details for CVE-2017-3049 are not provided in the connected documents; the initial description gives a summary (heap overflow in the TIFF image conversion) but no further specifics.

CVE-2017-3042

Adobe Acrobat Reader pre-update versions (11.0.19 and earlier; 15.006.30280 and earlier; 15.023.20070 and earlier) are affected by a heap overflow in image conversion when parsing TIFF offsets, potentially allowing arbitrary code execution. Remediation: upgrade to a fixed release (e.g., 11.0.20 o...

CVE-2017-3042

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable heap overflow vulnerability in image conversion, related to parsing offsets in TIFF files. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3049

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable heap overflow vulnerability in the image conversion engine, related to internal tile manipulation in TIFF files. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3048

Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable heap overflow vulnerability in the image conversion engine, related to internal scan line representation in TIFF files. Successful exploitation could lead to arbitrary code...

SUSE-SU-2017:0918-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issues: Security issue fixed: - CVE-2017-6335: Heap out of bounds write issue when reading CMYKA TIFF files which claim to offer fewer samples per pixel than required bsc1027255...

Debian DLA-880-1 : tiff3 security update

tiff3 is affected by multiple issues that can result at least in denial of services of applications using libtiff4. Crafted TIFF files can be provided to trigger: abort calls via failing assertions, buffer overruns both in read and write mode. CVE-2015-8781 tifluv.c in libtiff allows attackers to...

CVE-2016-10053

The WriteTIFFImage function in coders/tiff.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted file...

UBUNTU-CVE-2017-6314

The makeavailableatleast function in io-tiff.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service infinite loop via a large TIFF file...

openSUSE Security Update : GraphicsMagick (openSUSE-2017-214)

This update for GraphicsMagick fixes several issues. These security issues were fixed : - CVE-2016-10048: Arbitrary module could have been load because relative path were not escaped bsc1017310 - CVE-2016-10050: Corrupt RLE files could have overflowed a heap buffer due to a missing offset check...

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, allow attackers to execute arbitrary code.

The vulnerability in PDF viewer programs such as Adobe Reader and Document Cloud, as well as in PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, arises due to an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor...

Foxit Reader < 8.2 Multiple Vulnerabilities

Binary data 9898.prm...

UBUNTU-CVE-2017-5508

Heap-based buffer overflow in the PushQuantumPixel function in ImageMagick before 6.9.7-3 and 7.x before 7.0.4-3 allows remote attackers to cause a denial of service application crash via a crafted TIFF file...

Buffer overflow

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable buffer overflow / underflow vulnerability in the image conversion module related to parsing tags in TIFF files. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2952

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable buffer overflow / underflow vulnerability in the image conversion module related to parsing tags in TIFF files. Successful exploitation could lead to arbitrary code execution...

F5 Networks BIG-IP : Multiple LibTIFF vulnerabilities (K35155453)

CVE-2015-8683 The putcontig8bitCIELab function in tifgetimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service out-of-bounds read via a packed TIFF image. CVE-2015-8665 tifgetimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service out-of-bounds read vi...

Silicon Graphics LibTIFF Remote Code Execution Vulnerability

Silicon Graphics LibTIFF is a library for reading and writing TIFF files. A security vulnerability in Silicon Graphics LibTIFF can be exploited by remote attackers to construct malicious TIFF files that can be parsed by the user, which can crash an application or execute arbitrary code...

Silicon Graphics LibTIFF Heap Buffer Overflow Vulnerability (CNVD-2016-10453)

Silicon Graphics LibTIFF is a library for reading and writing TIFF files. A heap buffer overflow vulnerability exists in Silicon Graphics LibTIFF that can be exploited by a remote attacker to construct a malicious TIFF file that can be parsed by a user to crash an application or execute arbitrary...

USN-3090-1 Pillow vulnerabilities

It was discovered that a flaw in processing a compressed text chunk in a PNG image could cause the image to have a large size when decompressed, potentially leading to a denial of service. CVE-2014-9601 Andrew Drake discovered that Pillow incorrectly validated input. A remote attacker could use...

Debian DLA-610-2 : tiff3 regression update

Version 3.9.6-11+deb7u1 and 3.9.6-11+deb7u2 introduced changes that resulted in libtiff writing out invalid tiff files when the compression scheme in use relies on codec-specific TIFF tags embedded in the image. For Debian 7 'Wheezy', these problems have been fixed in version 3.9.6-11+deb7u3. We...