Exiv2 tiff parser heap buffer overflow vulnerability

Exiv2 is a set of C++ libraries and command line applications for managing image metadata developed by software developer Andreas Huggel, which provides the ability to quickly read and write image metadata in a variety of formats such as EXIF, IPTC, and XMP. tiff parser is one of the TIFF Tagged...

Debian DLA-1184-1 : optipng security update

An integer overflow vulnerability was found in optipng, an advanced PNG optimizer that also recognizes other external file formats. This may lead to arbitrary code execution when a maliciously crafted TIFF file is processed. For Debian 7 'Wheezy', these problems have been fixed in version...

[SECURITY] [DLA 1184-1] optipng security update

Package : optipng Version : 0.6.4-1+deb7u3 CVE ID : CVE-2017-1000229 Debian Bug : 882032 An integer overflow vulnerability was found in optipng, an advanced PNG optimizer that also recognizes other external file formats. This may lead to arbitrary code execution when a maliciously crafted TIFF fi...

PT-2017-4241 · Exiv2 +6 · Exiv2 +6

Name of the Vulnerable Software and Affected Versions: Exiv2 version 0.26 Description: The issue is related to a Null Pointer Dereference in the Exiv2::DataValue::toLong function in value.cpp, which can be triggered by crafted metadata in a TIFF file. This can potentially allow a remote attacker ...

CVE-2017-1000127

Exiv2 0.26 contains a heap buffer overflow in tiff parser...

Heap overflow

Exiv2 0.26 contains a heap buffer overflow in tiff parser...

CVE-2017-1000127

Exiv2 0.26 contains a heap buffer overflow in tiff parser...

PYSEC-2017-116

Exiv2 0.26 contains a heap buffer overflow in tiff parser...

PYSEC-2017-116

Exiv2 0.26 contains a heap buffer overflow in tiff parser...

CVE-2017-1000127

Exiv2 0.26 contains a heap buffer overflow in tiff parser...

CVE-2017-1000127

CVE-2017-1000127 : Exiv2 0.26 contains a heap-based buffer overflow in the TIFF parser. The connected PTSecurity entries indicate the vulnerability is addressed by upgrading Exiv2 to 0.27.2 or later. Public details in the provided docs confirm the issue is tied to the TIFF parser in Exiv2 0.26; n...

CVE-2017-1000127

Exiv2 0.26 contains a heap buffer overflow in tiff parser...

CVE-2017-1000127

Exiv2 0.26 contains a heap buffer overflow in tiff parser...

[SECURITY] Fedora 26 Update: ImageMagick-6.9.9.22-1.fc26

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

[SECURITY] Fedora 27 Update: ImageMagick-6.9.9.22-1.fc27

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

Adobe Acrobat and Reader Out-of-bounds Write (APSB17-36: CVE-2017-16413)

A memory corruption vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to out-of-bounds error while accessing unintended memory in a specially crafted TIFF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted TIFF fil...

Adobe Acrobat and Reader Buffer Access with Incorrect Length Value (APSB17-36: CVE-2017-16381)

A memory corruption vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to the way of processing TIFF files embedded within XPS document. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted XPS document...

Adobe Acrobat Pro DC XPS TIFF Rational Data Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16382)

An out-of-bounds read vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to improper validation of embedded TIFF images in a XPS file. A remote attacker could exploit this vulnerability by enticing a user to open a maliciously crafted webpage or a maliciously crafted XPS...

Adobe Acrobat Pro DC XPS TIFF PhotometricInterpretation Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...