Design/Logic Flaw

The getimagedimensions function in the image-handling functionality in Django before 1.3.2 and 1.4.x before 1.4.1 uses a constant chunk size in all attempts to determine dimensions, which allows remote attackers to cause a denial of service process or thread consumption via a large TIFF image...

PYSEC-2012-4

The getimagedimensions function in the image-handling functionality in Django before 1.3.2 and 1.4.x before 1.4.1 uses a constant chunk size in all attempts to determine dimensions, which allows remote attackers to cause a denial of service process or thread consumption via a large TIFF image...

CVE-2012-3444

The getimagedimensions function in the image-handling functionality in Django before 1.3.2 and 1.4.x before 1.4.1 uses a constant chunk size in all attempts to determine dimensions, which allows remote attackers to cause a denial of service process or thread consumption via a large TIFF image...

Integer overflow

Multiple integer overflows in tiff2pdf in libtiff before 4.0.2 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow...

CVE-2012-2088

Integer signedness error in the TIFFReadDirectory function in tifdirread.c in libtiff 3.9.4 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a negative tile depth in a tiff image, which triggers an improper conversion betwe...

CVE-2012-2088

Integer signedness error in the TIFFReadDirectory function in tifdirread.c in libtiff 3.9.4 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a negative tile depth in a tiff image, which triggers an improper conversion betwe...

CVE-2012-3401

The t2preadtiffinit function in tiff2pdf tools/tiff2pdf.c in LibTIFF 4.0.2 and earlier does not properly initialize the T2P context struct pointer in certain error conditions, which allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a...

Memory corruption

The tcdfreeencode function in tcd.c in OpenJPEG 1.3 through 1.5 allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via crafted tile information in a Gray16 TIFF image, which causes insufficient memory to be allocated and leads to an "invalid...

CVE-2009-5030

The tcdfreeencode function in tcd.c in OpenJPEG 1.3 through 1.5 allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via crafted tile information in a Gray16 TIFF image, which causes insufficient memory to be allocated and leads to an "invalid...

CVE-2009-5030

The tcdfreeencode function in tcd.c in OpenJPEG 1.3 through 1.5 allows remote attackers to cause a denial of service memory corruption and possibly execute arbitrary code via crafted tile information in a Gray16 TIFF image, which causes insufficient memory to be allocated and leads to an "invalid...

CVE-2012-0276

Multiple heap-based buffer overflows in XnView before 1.99 allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a 1 SGI32LogLum compressed TIFF image or 2 SGI32LogLum compressed TIFF image with the PhotometricInterpretation encoding set to...

CVE-2012-0276

Multiple heap-based buffer overflows in XnView before 1.99 allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a 1 SGI32LogLum compressed TIFF image or 2 SGI32LogLum compressed TIFF image with the PhotometricInterpretation encoding set to...

GLSA-201206-02 : QtGui: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201206-02 QtGui: User-assisted execution of arbitrary code An error in qtiffhandler.cpp could cause a buffer overflow. Impact : A remote attacker could entice a user to open a specially crafted TIFF image with an application linke...

CVE-2012-1798

The TIFFGetEXIFProperties function in coders/tiff.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted EXIF IFD in a TIFF image...

CVE-2012-1798

The TIFFGetEXIFProperties function in coders/tiff.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted EXIF IFD in a TIFF image...

Out-of-bounds

The TIFFGetEXIFProperties function in coders/tiff.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted EXIF IFD in a TIFF image...

CVE-2012-1798

The TIFFGetEXIFProperties function in coders/tiff.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted EXIF IFD in a TIFF image...

CVE-2012-1798

The TIFFGetEXIFProperties function in coders/tiff.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted EXIF IFD in a TIFF image...

Adobe Photoshop < CS5 / CS5.1 Multiple Arbitrary Code Execution Vulnerabilities (APSB12-11)

The version of Adobe Photoshop installed on the remote Windows host is prior to CS5 12.0.5 or CS5.1 12.1.1. It is, therefore, multiple arbitrary code execution vulnerabilities : - Multiple heap-based buffer overflow conditions exist due to a failure to properly sanitize user-supplied input when...

Moderate: Red Hat Security Advisory: ImageMagick security update

Updated ImageMagick packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings,...