Silicon Graphics LibTIFF Heap Buffer Overflow Vulnerability (CNVD-2016-10453)

Silicon Graphics LibTIFF is a library for reading and writing TIFF files. A heap buffer overflow vulnerability exists in Silicon Graphics LibTIFF that can be exploited by a remote attacker to construct a malicious TIFF file that can be parsed by a user to crash an application or execute arbitrary...

USN-3090-1 Pillow vulnerabilities

It was discovered that a flaw in processing a compressed text chunk in a PNG image could cause the image to have a large size when decompressed, potentially leading to a denial of service. CVE-2014-9601 Andrew Drake discovered that Pillow incorrectly validated input. A remote attacker could use...

Debian DLA-610-2 : tiff3 regression update

Version 3.9.6-11+deb7u1 and 3.9.6-11+deb7u2 introduced changes that resulted in libtiff writing out invalid tiff files when the compression scheme in use relies on codec-specific TIFF tags embedded in the image. For Debian 7 'Wheezy', these problems have been fixed in version 3.9.6-11+deb7u3. We...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2016:2076-1)

This update for ImageMagick fixes the following issues : - security update : - CVE-2016-6520: buffer overflow bsc991872 - CVE-2016-5010: Out-of-bounds read in CopyMagickMemory bsc991444 - CVE-2016-6491: Out-of-bounds read when processing crafted tiff files bsc991445 Note that Tenable Network...

openSUSE Security Update : ImageMagick (openSUSE-2016-983)

This update for ImageMagick fixes the following issues : - security update : - CVE-2016-6520: buffer overflow bsc991872 - CVE-2016-5010: Out-of-bounds read in CopyMagickMemory bsc991444 - CVE-2016-6491: Out-of-bounds read when processing crafted tiff files bsc991445 %NASLMINLEVEL 70300 C Tenable...

Important: Red Hat Security Advisory: libtiff security update

An update for libtiff is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Silicon Graphics LibTiff 'PixarLogDecode' Function Denial of Service Vulnerability

Silicon Graphics LibTiff is a library for reading and writing TIFF files. A security vulnerability in the 'PixarLogDecode' function in Silicon Graphics LibTiff's tifpixarlog.c file allows remote attackers to exploit the vulnerability to construct special TIFF images that can be tricked into being...

SUSE-SU-2016:1569-1 Security update for python-Pillow

This update for python-Pillow fixes the following security issues: CVE-2016-0775: Fixed a buffer overflow in FliDecode.c causing a segfault when opening FLI files. bsc965582 CVE-2016-0740: Fixed a buffer overflow in TiffDecode.c causing an arbitrary amount of memory to be overwritten when opening...

SUSE-SU-2016:1355-1 Security update for python-Pillow

This update for python-Pillow fixes the following security issues: CVE-2016-0775: Fixed a buffer overflow in FliDecode.c causing a segfault when opening FLI files. bsc965582 CVE-2016-0740: Fixed a buffer overflow in TiffDecode.c causing an arbitrary amount of memory to be overwritten when opening...

PYSEC-2016-5

Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file...

SUSE-SU-2016:0935-1 Security update for python-Pillow

This update for python-Pillow fixes the following security issues: CVE-2016-0775: Fixed a buffer overflow in FliDecode.c causing a segfault when opening FLI files. bsc965582 CVE-2016-0740: Fixed a buffer overflow in TiffDecode.c causing an arbitrary amount of memory to be overwritten when opening...

SUSE-SU-2016:0924-1 Security update for python-Pillow

This update for python-Pillow fixes the following security issues: Fixed an integer overflow in Resample.c causing writes in the Python heap. Fixed a buffer overflow in PcdDecode.c causing a segfault when opening PhotoCD files. CVE-2016-TBD Fixed a buffer overflow in FliDecode.c causing a segfaul...

Debian Security Advisory DSA 3499-1 (pillow - security update)

Multiple security vulnerabilities have been found in Pillow, a Python imaging library, which may result in denial of service or the execution of arbitrary code if a malformed FLI, PCD or Tiff files is processed. OpenVAS Vulnerability Test $Id: deb3499.nasl 6608 2017-07-07 12:05:05Z cfischer $...

Debian DSA-3499-1 : pillow - security update

Multiple security vulnerabilities have been found in Pillow, a Python imaging library, which may result in denial of service or the execution of arbitrary code if a malformed FLI, PCD or Tiff files is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

openSUSE Security Update : ffmpeg (openSUSE-2016-246)

This update to ffmpeg 2.8.6 fixes the following issues : - CVE-2016-2329: Remote DoS via crafted TIFF files boo966674 VLC was updated to 2.8.6, containing various other upstream bugfixes. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

Apple iOS ImageIO Memory Corruption Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in Apple iOS ImageIO's handling of TIFF files, which allows remote attackers to exploit the vulnerability to construct special files that can be tricked into parsi...

Foxit Reader TIFF Conversion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion of...

Scientific Linux Security Update : libtiff on SL5.x, SL6.x i386/x86_64 (20120703)

The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. libtiff did not properly convert between signed and unsigned integer values, leading to a buffer overflow. An attacker could use this flaw to create a specially crafted TIFF file that, when...

Microsoft Windows Graphics Component Information Disclosure Vulnerability

Microsoft Windows is a popular operating system. An information disclosure vulnerability exists in the Microsoft Windows Graphics component. Because the program fails to properly handle TIFF image files, it allows an attacker to construct malicious files that can be parsed by the user, which can...

Microsoft Windows Kodak Image Viewer Code Execution (MS07-055) - ver 2 (CVE-2007-2217)

A buffer overflow vulnerability has been reported in Microsoft Windows Kodak Image Viewer. The vulnerability is due to improper parsing of specially crafted image files, such as TIFF files. An attacker can exploit this vulnerability by constructing a specially crafted image and enticing a victim ...