CVE-2020-13561

CVE-2020-13561 is an out-of-bounds write vulnerability in the TIFF parser of Accusoft ImageGear 19.8. The TALOS analysis describes a flaw in the image processing pipeline (sigread buffer handling) that can be triggered by a malformed TIFF file, leading to memory corruption and potential code exec...

Accusoft ImageGear TIFF index record out-of-bounds write vulnerability

Summary An out-of-bounds write vulnerability exists in the TIFF parser of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. Tested Versions Accusoft ImageGear 19.8 Product URLs...

Accusoft ImageGear Buffer Overflow Vulnerability (CNVD-2020-16508)

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. A buffer overflow vulnerability exists in the TIFF raster image parser igcore19d.dll in Accusoft ImageGear version 19.5.0. A remote attacker could exploit this vulnerability to execute code...

Accusoft ImageGear TIFF tifread code execution vulnerability

Summary An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll TIFF tifread parser of the Accusoft ImageGear 19.5.0 library. A specially crafted TIFF file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to...

exiv2: Segmentation fault in Exiv2::Internal::TiffParserWorker::findPrimaryGroups function

There is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimageint.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service. A heap-based buffer overflow in the tiff parser allows an attacker to crash the application, or potentially execute arbitrary code...

Exiv2 SEGV Vulnerability

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. A SEGV vulnerability exists in Exiv2::Internal::TiffParserWorker::findPrimaryGroups in tiffimageint.cpp in Exiv2 0.27-RC3, which can be exploited by a remote attacker to cause a denial of service via...

DEBIAN-CVE-2018-20097

There is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimageint.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

CVE-2017-1000127

Exiv2 0.26 contains a heap buffer overflow in tiff parser...

Exiv2 tiff parser heap buffer overflow vulnerability

Exiv2 is a set of C++ libraries and command line applications for managing image metadata developed by software developer Andreas Huggel, which provides the ability to quickly read and write image metadata in a variety of formats such as EXIF, IPTC, and XMP. tiff parser is one of the TIFF Tagged...

PYSEC-2017-116

Exiv2 0.26 contains a heap buffer overflow in tiff parser...

Heap overflow

Exiv2 0.26 contains a heap buffer overflow in tiff parser...

CVE-2017-1000127

Exiv2 0.26 contains a heap buffer overflow in tiff parser...

CVE-2017-1000127

Exiv2 0.26 contains a heap buffer overflow in tiff parser...

PYSEC-2017-116

Exiv2 0.26 contains a heap buffer overflow in tiff parser...

CVE-2017-1000127

Exiv2 0.26 contains a heap buffer overflow in tiff parser...

CVE-2017-1000127

CVE-2017-1000127 : Exiv2 0.26 contains a heap-based buffer overflow in the TIFF parser. The connected PTSecurity entries indicate the vulnerability is addressed by upgrading Exiv2 to 0.27.2 or later. Public details in the provided docs confirm the issue is tied to the TIFF parser in Exiv2 0.26; n...

CVE-2017-1000127

Exiv2 0.26 contains a heap buffer overflow in tiff parser...

Oracle Linux 3 / 4 : openoffice.org (ELSA-2007-0848)

From Red Hat Security Advisory 2007:0848 : Updated openoffice.org packages to correct a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office...

Scientific Linux Security Update : openoffice.org on SL5.x, SL4.x, SL3.x i386/x86_64

A heap overflow flaw was found in the TIFF parser. An attacker could create a carefully crafted document containing a malicious TIFF file that could cause OpenOffice.org to crash or possibly execute arbitrary code if opened by a victim. CVE-2007-2834 %NASLMINLEVEL 70300 C Tenable Network Security...