CVE-2019-12213

When FreeImage 3.18.0 reads a special TIFF file, the TIFFReadDirectory function in PluginTIFF.cpp always returns 1, leading to stack exhaustion...

CVE-2019-12213

When FreeImage 3.18.0 reads a special TIFF file, the TIFFReadDirectory function in PluginTIFF.cpp always returns 1, leading to stack exhaustion...

CVE-2019-12213

When FreeImage 3.18.0 reads a special TIFF file, the TIFFReadDirectory function in PluginTIFF.cpp always returns 1, leading to stack exhaustion...

CVE-2019-12211

When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file, but a memcpy occurs in which the destination address and the size of the copied data are not considered, resulting in a heap overflow...

CVE-2019-12211

CVE-2019-12211 affects the FreeImage library (notably up to 3.18.0, with fixes in later package updates) where a memcpy in PluginTIFF.cpp can cause a heap overflow when processing TIFF data. This is a remote-attack surface that could lead to denial of service as described in multiple advisories. ...

CVE-2019-12211

When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file, but a memcpy occurs in which the destination address and the size of the copied data are not considered, resulting in a heap overflow...

imagemagick/encoder_tiff_fuzzer: Use-of-uninitialized-value in HalfToSinglePrecision

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5640152724013056 Project: imagemagick Fuzzer: libFuzzerimagemagickencodertifffuzzer Fuzz target binary: encodertifffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

FreeImage Resource Management Error Vulnerability

FreeImage is a cross-platform open source library for supporting popular graphic image formats. When FreeImage 3.18.0 reads special TIFF files, the TIFFReadDirectory function in PluginTIFF.cpp always returns 1, causing the stack to run out...

UBUNTU-CVE-2017-12805

In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function ReadTIFFImage, which allows attackers to cause a denial of service...

Fedora Update for libtiff FEDORA-2019-d7b5e168d1

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora Update for libtiff FEDORA-2018-bd18c784de

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-11687

An issue was discovered in the DICOM Part 10 File Format in the NEMA DICOM Standard 1995 through 2019b and continuing in current implementations. The 128-byte preamble of a DICOM file that complies with this specification can contain arbitrary executable headers for multiple operating systems,...

CVE-2019-11597

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file...

Heap-Based Buffer Overflow

LibTIFF's TIFF2PDF tool is vulnerable to heap-based buffer overflow attacks. A attacker can exploit this issue to execute arbitrary code via a specifically crafted TIFF file which may leads the application to crash...

Denial Of Service (DoS)

libtiff is vulnerable to heap-based buffer overflow vulnerability. Remote attackers can cause a denial of service out-of-bounds write or execute arbitrary code via a crafted TIFF image with zero tiles. loadImage function in tiffcrop.c. loadImage will read the numbers of tiles by calling...

Denial Of Service (DoS)

libtiff is vulnerable to heap-based buffer overflow vulnerability. This is because it fails to properly bounds check user-supplied data before copying it into an insufficiently sized buffer. Attackers can exploit this issue to execute arbitrary commands via a crafted TIFF image to tiffcp or cause...

Denial Of Service (DoS)

libtiff is vulnerable to denial of service DoS attacks. This allows remote attackers to affect the availability via a crafted TIFF image, as demonstrated by libtiff-cvs-1.tif and libtiff-cvs-2.tif...

Denial Of Service (DoS)

libtiff is vulnerable to denial of service DOS attacks. This allows remote attackers to affect the availability via a crafted TIFF image, as demonstrated by libtiff5.tif...

Denial Of Service (DoS)

LibTIFF is vulnerable to denial of service DoS attacks. This allows an attacker to cause application crash via a crafted TIFF image that is mishandled by the TIFFWriteScanline function...

Remote Code Execution (RCE) Via Memory Corruption

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php55 packages provide a recent stable release of PHP with the PEAR 1.9.4, memcache 3.0.8, and mongo 1.4.5 PECL extensions, and a number of additional utilities. The php55 packages have been upgraded to...