Debian: Security Advisory (DLA-1346-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DLA-1346-1 tiff - security update

Bulletin has no description...

Denial Of Service (DoS) Through Memory Leak

libtiff.so is vulnerable to denial of service DoS through memory leak. The vulnerability exists as was not freed in the JBGEOK != decodeStatus branch found in the JBIGDecode function of tifjbig.c, allowing a malicious TIFF document to cause denial of service DoS when it is processed...

Computerinsel Photoline TIFF parsing function memory corruption vulnerability (CNVD-2018-08685)

PhotoLine is a multipurpose image and graphics editor. A memory corruption vulnerability exists in the TIFF parsing feature in Computerinsel Photoline 20.53. An attacker can exploit this vulnerability to cause out-of-bounds writes and overwrite arbitrary data via specially crafted TIFF images,...

CVE-2018-3862

A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting...

CVE-2018-3868

A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution...

CVE-2018-3861

A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution...

Design/Logic Flaw

A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution...

Design/Logic Flaw

A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution...

Design/Logic Flaw

A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting...

CVE-2018-3861

A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution...

CVE-2018-3862

A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting...

CVE-2018-3868

A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution...

CVE-2018-3862

CVE-2018-3862 is a memory-corruption in Computerinsel Photoline 20.53, where TIFF parsing of certain per-tile data can trigger an out-of-bounds write overwriting data, potentially enabling code execution. The TALOS-2018-0547 writeup details TIFF Bits Per Pixel handling that leads to the exploit p...

CVE-2018-3868

A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution...

CVE-2018-3861

Cisco Talos details CVE-2018-3861 as a memory corruption in Computerinsel Photoline 20.53 TIFF parsing. The TIFF tile/scan parsing code can compute an address from image data without proper validation, enabling an out-of-bounds write that overwrites data and can lead to code execution. The TALOS-...

CVE-2018-3861

A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution...

CVE-2018-3862

A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting...

CVE-2018-3868

PT-2018-16262 references Computerinsel Photoline and describes a TIFF-processing vulnerability that can cause an out-of-bounds write, overwriting data and potentially enabling code execution when a specially crafted TIFF image is processed. The document provides no specific affected software name...

Denial Of Service (DoS) Through Divide By Zero

libtiff.so is vulnerable to denial of service DoS through divide-by-zero. The vulnerability exists in the TIFFFax3fillruns function in tiffax3.c and occurs when a malicious TIFF image is used with the tiffcrop command...