CVE-2019-11459

The tiffdocumentrender and tiffdocumentgetthumbnail functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented, leading to uninitialized memory use when processing certain TIFF image files...

DEBIAN-CVE-2019-11459

The tiffdocumentrender and tiffdocumentgetthumbnail functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented, leading to uninitialized memory use when processing certain TIFF image files...

CVE-2019-11459

The tiffdocumentrender and tiffdocumentgetthumbnail functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented, leading to uninitialized memory use when processing certain TIFF image files...

CVE-2019-11459

The CVE-2019-11459 entry affects the Evince TIFF backend. The root cause is that tiff_document_render() and tiff_document_get_thumbnail() did not properly handle errors returned by TIFFReadRGBAImageOriented(), which can lead to disclosure of uninitialized memory when processing certain TIFF image...

CVE-2019-11459

The tiffdocumentrender and tiffdocumentgetthumbnail functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented, leading to uninitialized memory use when processing certain TIFF image files...

CVE-2019-11459

The tiffdocumentrender and tiffdocumentgetthumbnail functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented, leading to uninitialized memory use when processing certain TIFF image files...

CVE-2019-11459

The tiffdocumentrender and tiffdocumentgetthumbnail functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented, leading to uninitialized memory use when processing certain TIFF image files...

UBUNTU-CVE-2019-11459

The tiffdocumentrender and tiffdocumentgetthumbnail functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented, leading to uninitialized memory use when processing certain TIFF image files...

opencv/imread_fuzzer: Crash in _TIFFmemset

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5760646009847808 Project: opencv Fuzzer: aflopencvimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: aflasanopencv Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7fe0ecdf77d0 Crash...

GLSA-201904-15 : libTIFF: Denial of service

The remote host is affected by the vulnerability described in GLSA-201904-15 libTIFF: Denial of service Please review the CVE identifier referenced below for details. Impact : Please review the CVE identifier referenced below for details. Workaround : There is no known workaround at this time. C...

libTIFF: Denial of service

Background The TIFF library contains encoding and decoding routines for the Tag Image File Format. It is called by numerous programs, including GNOME and KDE applications, to interpret TIFF images. Description Please review the CVE identifier referenced below for details. Impact Please review the...

PT-2019-5048 · Gnome +8 · Gnome Evince +8

Name of the Vulnerable Software and Affected Versions: GNOME Evince versions prior to 3.32.0 Description: The issue is related to the use of uninitialized memory in the TIFFReadRGBAImageOriented function of the Evince document viewer. This can be exploited by a remote attacker to gain unauthorize...

openSUSE Security Update : tiff (openSUSE-2019-1161)

This update for tiff fixes the following issues : Security issues fixed : - CVE-2018-19210: Fixed a NULL pointer dereference in TIFFWriteDirectorySec function bsc1115717. - CVE-2018-17000: Fixed a NULL pointer dereference in the TIFFmemcmp function bsc1108606. - CVE-2019-6128: Fixed a memory leak...

openSUSE: Security Advisory for tiff (openSUSE-SU-2019:1161-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2019:1161-1 Security update for tiff

This update for tiff fixes the following issues: Security issues fixed: - CVE-2018-19210: Fixed a NULL pointer dereference in TIFFWriteDirectorySec function bsc1115717. - CVE-2018-17000: Fixed a NULL pointer dereference in the TIFFmemcmp function bsc1108606. - CVE-2019-6128: Fixed a memory leak i...

Security update for tiff (moderate)

openSUSE Security Update: Security update for tiff Announcement ID: openSUSE-SU-2019:1161-1 Rating: moderate References: 1108606 1115717 1121626 1125113 Cross-References: CVE-2018-17000 CVE-2018-19210 CVE-2019-6128 CVE-2019-7663 Affected Products: openSUSE Leap 15.0 An update that fixes four...

SUSE SLES11 Security Update : tiff (SUSE-SU-2019:14002-1)

This update for tiff fixes the following issue : Security vulnerabilities fixed : CVE-2016-5102: Fixed a buffer overflow in readgifimage bsc983268 CVE-2019-6128: Fixed a memory leak in the TIFFFdOpen function in tifunix.c bsc1121626 Note that Tenable Network Security has extracted the preceding...

SUSE-SU-2019:14002-1 Security update for tiff

This update for tiff fixes the following issue: Security vulnerabilities fixed: - CVE-2016-5102: Fixed a buffer overflow in readgifimage bsc983268 - CVE-2019-6128: Fixed a memory leak in the TIFFFdOpen function in tifunix.c bsc1121626...

Nconvert suffers from a tiff file parsing stack overflow vulnerability

XnView is a multi-platform image viewing software developed by French software developer Gougelet Pierre-Emmanuel. Nconvert suffers from a tiff file parsing stack overflow vulnerability and a buffer out-of-bounds write vulnerability when parsing tiff files, which can be exploited by an attacker t...

Nconvert suffers from a tiff file parsing heap overflow vulnerability ( CNVD-2019-12113)

XnView is a multi-platform image viewing software developed by French software developer Gougelet Pierre-Emmanuel. Nconvert suffers from a tiff file parsing heap overflow vulnerability and a heap out-of-bounds write vulnerability when parsing tiff files, which allows an attacker to construct a...