Mandriva Linux Security Advisory : libtiff (MDVSA-2012:127)

A vulnerability was found and corrected in libtiff : A heap-based buffer overflow flaw was found in the way tiff2pdf, a TIFF image to a PDF document conversion tool, of libtiff, a library of functions for manipulating TIFF Tagged Image File Format image format files, performed write of TIFF image...

CVE-2012-3401

CVE-2012-3401 : Affects LibTIFF up to version 4.0.2 (LibTIFF 4.0.2 and earlier). The t2p_read_tiff_init function in tiff2pdf.c does not reliably initialize the T2P context in certain error paths, enabling context-dependent attackers to trigger a denial of service (crash) and, via a crafted TIFF i...

CVE-2012-3401: Improper Restriction of Operations within the Bounds of a Memory Buffer

The t2preadtiffinit function in tiff2pdf tools/tiff2pdf.c in LibTIFF 4.0.2 and earlier does not properly initialize the T2P context struct pointer in certain error conditions, which allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a...

[ MDVSA-2012:127 ] libtiff

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2012:127 http://www.mandriva.com/security/ Package : libtiff Date : August 8, 2012 Affected: 2011., Enterprise Server 5.0 Problem Description: A vulnerability was found and corrected in libtiff: A heap-based buff...

Mandriva Update for libtiff MDVSA-2012:127 (libtiff)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Scientific Linux Security Update : libtiff on SL3.x, SL4.x, SL5.x i386/x86_64

Multiple uses of uninitialized values were discovered in libtiff's Lempel-Ziv-Welch LZW compression algorithm decoder. An attacker could create a carefully crafted LZW-encoded TIFF file that would cause an application linked with libtiff to crash or, possibly, execute arbitrary code. CVE-2008-232...

CentOS Update for libtiff CESA-2012:1054 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

PT-2012-1118

Name of the Vulnerable Software and Affected Versions libTIFF versions 4.0.2 and earlier Description The issue is related to the t2p read tiff init function in tiff2pdf tools/tiff2pdf.c which does not properly initialize the T2P context struct pointer in certain error conditions. This allows...

Ubuntu Update for tiff USN-1511-1

Ubuntu Update for Linux kernel vulnerabilities USN-1511-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN15111.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for tiff USN-1511-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

DEBIAN-CVE-2012-2113

Multiple integer overflows in tiff2pdf in libtiff before 4.0.2 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow...

CVE-2012-2113

Multiple integer overflows in tiff2pdf in libtiff before 4.0.2 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow...

CVE-2012-2113

Multiple integer overflows in tiff2pdf in libtiff before 4.0.2 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow...

CVE-2012-2113

Multiple integer overflows in tiff2pdf in libtiff before 4.0.2 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow...

CVE-2012-2113

CVE-2012-2113 refers to multiple integer overflows in tiff2pdf within libtiff prior to 4.0.2. The vulnerability enables a remote attacker to crash the application or potentially execute arbitrary code by feeding a crafted TIFF image, triggering a heap-based buffer overflow. Affected component: li...

CVE-2012-2113

Multiple integer overflows in tiff2pdf in libtiff before 4.0.2 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow...

CVE-2012-2113: Undefined Security Weakness

Multiple integer overflows in tiff2pdf in libtiff before 4.0.2 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow...

USN-1511-1: tiff vulnerability

Huzaifa Sidhpurwala discovered that the tiff2pdf utility incorrectly handled certain malformed TIFF images. If a user or automated system were tricked into opening a specially crafted TIFF image, a remote attacker could crash the application, leading to a denial of service, or possibly execute...

Ubuntu Update for tiff USN-1498-1

Ubuntu Update for Linux kernel vulnerabilities USN-1498-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14981.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for tiff USN-1498-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Mandriva Update for libtiff MDVSA-2012:101 (libtiff)

Check for the Version of libtiff OpenVAS Vulnerability Test Mandriva Update for libtiff MDVSA-2012:101 libtiff Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Linux Security Advisory : libtiff (MDVSA-2012:101)

Multiple vulnerabilities has been discovered and corrected in libtiff : libtiff did not properly convert between signed and unsigned integer values, leading to a buffer overflow. An attacker could use this flaw to create a specially crafted TIFF file that, when opened, would cause an application...