FreeBSD : tiff -- divide-by-zero denial-of-service (b58ff497-6977-11d9-ae49-000c41e2cdad)

A US-CERT vulnerability note reports : An Integer overflow in the LibTIFF library may allow a remote attacker to cause a divide-by-zero error that results in a denial-of-service condition. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

Debian DSA-755-1 : tiff - buffer overflow

Frank Warmerdam discovered a stack-based buffer overflow in libtiff, the Tag Image File Format library for processing TIFF graphics files that can lead to the execution of arbitrary code via malformed TIFF files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...

USN-130-1: TIFF library vulnerability

Tavis Ormandy discovered a buffer overflow in the TIFF library. A malicious image with an invalid "bits per sample" number could be constructed which, when decoded, would have resulted in execution of arbitrary code with the privileges of the process using the library. Since this library is used ...

Fedora Core 2 : ImageMagick-6.2.0.7-2.fc2 (2005-234)

Andrei Nigmatulin discovered a heap based buffer overflow flaw in the ImageMagick image handler. An attacker could create a carefully crafted Photoshop Document PSD image in such a way that it would cause ImageMagick to execute arbitrary code when processing the image. The Common Vulnerabilities...

Fedora Core 2 : xloadimage-4.1-34.FC2 (2005-236)

This update fixes CVE-2005-0638, a problem in the parsing of shell metacharacters in filenames. It also fixes bugs in handling of malformed TIFF and PBM/PNM/PPM issues. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

CVE-2005-1544

Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag...

CVE-2005-1544

Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag...

CVE-2005-1544

Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag...

CVE-2005-1544

Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag...

CVE-2005-1544

CVE-2005-1544 describes a stack-based buffer overflow in libTIFF prior to 3.7.2, triggered while processing a TIFF file with a malformed BitsPerSample tag. This allows remote attackers to execute arbitrary code. The OpenVAS and distro advisories (e.g., Debian DSA-755-1, Ubuntu USN-130-1, Mandrake...

DEBIAN-CVE-2005-1544

Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag...

CVE-2005-1544: Undefined Security Weakness

Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag...

GLSA-200505-07 : libTIFF: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200505-07 libTIFF: Buffer overflow Tavis Ormandy of the Gentoo Linux Security Audit Team discovered a stack based buffer overflow in the libTIFF library when reading a TIFF image with a malformed BitsPerSample tag. Impact :...

libTIFF: Buffer overflow

Background libTIFF provides support for reading and manipulating TIFF Tag Image File Format images. Description Tavis Ormandy of the Gentoo Linux Security Audit Team discovered a stack based buffer overflow in the libTIFF library when reading a TIFF image with a malformed BitsPerSample tag. Impac...

Apple Cocoa applications vulnerable to denial of service via malformed TIFF image

Overview Apple Mac OS X applications using the Cocoa environment may quit due to an unhandled exception in TIFF image handling routines. Description Mac OS X applications may take advantage of the Cocoa programming environment, which is described by Apple as "an object-oriented application...

CVE-2005-1330

AppKit in Mac OS X 10.3.9 allows attackers to cause a denial of service Cocoa application crash via a malformed TIFF image that causes the NXSeek to use an incorrect offset, leading to an unhandled exception...

CVE-2005-1330

CVE-2005-1330 affects Apple Mac OS X 10.3.9 AppKit: processing malformed TIFF images can cause NXSeek to offset incorrectly, leading to an unhandled exception and a denial-of-service (Cocoa application crash). The CERT/NVD entries describe the impact as an unauthenticated remote-triggered DoS via...

CVE-2004-1307

Integer overflow in the TIFFFetchStripThing function in tifdirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overfl...

CVE-2004-1307

Integer overflow in the TIFFFetchStripThing function in tifdirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overfl...

CVE-2005-1330

AppKit in Mac OS X 10.3.9 allows attackers to cause a denial of service Cocoa application crash via a malformed TIFF image that causes the NXSeek to use an incorrect offset, leading to an unhandled exception...