USN-639-1: tiff vulnerability

Drew Yao discovered that the TIFF library did not correctly validate LZW compressed TIFF images. If a user or automated system were tricked into processing a malicious image, a remote attacker could execute arbitrary code or cause an application linked against libtiff to crash, leading to a denia...

libtiff security update

CentOS Errata and Security Advisory CESA-2008:0848 Updated libtiff packages that fix various security issues and a bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The libtiff packages conta...

RHEL 4 : libtiff (RHSA-2008:0848)

Updated libtiff packages that fix various security issues and a bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The libtiff packages contain a library of functions for manipulating Tagged...

Important: Red Hat Security Advisory: libtiff security update

Updated libtiff packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having important security impact by the Red Hat Security Response Team. The libtiff packages contain a library of functions for manipulating Tagged Image File...

Important: Red Hat Security Advisory: libtiff security and bug fix update

Updated libtiff packages that fix various security issues and a bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The libtiff packages contain a library of functions for manipulating Tagged...

libtiff: use of uninitialized memory in LZW decoder

Multiple buffer underflows in the 1 LZWDecode, 2 LZWDecodeCompat, and 3 LZWDecodeVector functions in tiflzw.c in the LZW decoder in LibTIFF 3.8.2 and earlier allow context-dependent attackers to execute arbitrary code via a crafted TIFF file, related to improper handling of the CODECLEAR code...

Important: Red Hat Security Advisory: libtiff security and bug fix update

Updated libtiff packages that fix a security issue and a bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The libtiff packages contain a library of functions for manipulating Tagged Image Fi...

CVE-2008-2327

Multiple buffer underflows in the 1 LZWDecode, 2 LZWDecodeCompat, and 3 LZWDecodeVector functions in tiflzw.c in the LZW decoder in LibTIFF 3.8.2 and earlier allow context-dependent attackers to execute arbitrary code via a crafted TIFF file, related to improper handling of the CODECLEAR code...

DEBIAN-CVE-2008-2327

Multiple buffer underflows in the 1 LZWDecode, 2 LZWDecodeCompat, and 3 LZWDecodeVector functions in tiflzw.c in the LZW decoder in LibTIFF 3.8.2 and earlier allow context-dependent attackers to execute arbitrary code via a crafted TIFF file, related to improper handling of the CODECLEAR code...

CVE-2008-2327

Multiple buffer underflows in the 1 LZWDecode, 2 LZWDecodeCompat, and 3 LZWDecodeVector functions in tiflzw.c in the LZW decoder in LibTIFF 3.8.2 and earlier allow context-dependent attackers to execute arbitrary code via a crafted TIFF file, related to improper handling of the CODECLEAR code...

CVE-2008-2327

Multiple buffer underflows in the 1 LZWDecode, 2 LZWDecodeCompat, and 3 LZWDecodeVector functions in tiflzw.c in the LZW decoder in LibTIFF 3.8.2 and earlier allow context-dependent attackers to execute arbitrary code via a crafted TIFF file, related to improper handling of the CODECLEAR code...

Debian DSA-1632-1 : tiff - buffer underflow

Drew Yao discovered that libTIFF, a library for handling the Tagged Image File Format, is vulnerable to a programming error allowing malformed tiff files to lead to a crash or execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

DTSA-160-1 tiff - buffer underflow

Bulletin has no description...

DSA-1632-1 tiff - arbitrary code execution

Bulletin has no description...

DEBIAN-CVE-2008-3134

Multiple unspecified vulnerabilities in GraphicsMagick before 1.2.4 allow remote attackers to cause a denial of service crash, infinite loop, or memory consumption via a unspecified vectors in the 1 AVI, 2 AVS, 3 DCM, 4 EPT, 5 FITS, 6 MTV, 7 PALM, 8 RLA, and 9 TGA decoder readers; and b the...

Code injection

Multiple unspecified vulnerabilities in GraphicsMagick before 1.2.4 allow remote attackers to cause a denial of service crash, infinite loop, or memory consumption via a unspecified vectors in the 1 AVI, 2 AVS, 3 DCM, 4 EPT, 5 FITS, 6 MTV, 7 PALM, 8 RLA, and 9 TGA decoder readers; and b the...

CVE-2008-3134: Undefined Security Weakness

Multiple unspecified vulnerabilities in GraphicsMagick before 1.2.4 allow remote attackers to cause a denial of service crash, infinite loop, or memory consumption via a unspecified vectors in the 1 AVI, 2 AVS, 3 DCM, 4 EPT, 5 FITS, 6 MTV, 7 PALM, 8 RLA, and 9 TGA decoder readers; and b the...

GraphicsMagick多个拒绝服务漏洞

BUGTRAQ ID: 30055 GraphicsMagick是一个简单的图像处理工具。 GraphicsMagick的AVI、AVS、DCM、EPT、FITS、MTV、PALM、RLA和TGA解码器中存在多个漏洞，可能触发崩溃、分配过多内存或执行死循环。 GraphicsMagick的magick/image.c文件中的GetImageCharacteristics函数中存在漏洞，如果用户受骗打开了特制的PNG、JPEG、BMP或TIFF文件的话，就会导致崩溃。 GraphicsMagick Group GraphicsMagick 1.2.3 GraphicsMagick Grou...

[SECURITY] Fedora 7 Update: tkimg-1.3-0.8.20080505svn.fc7

This package contains a collection of image format handlers for the Tk photo image type, and a new image type, pixmaps. The provided format handlers include bmp, gif, ico, jpeg, pcx, png, ppm, ps, sgi, sun, tga, tiff, xbm, and xpm...

Debian Security Advisory DSA 755-1 (tiff)

The remote host is missing an update to tiff announced via advisory DSA 755-1. Frank Warmerdam discovered a stack-based buffer overflow in libtiff, the Tag Image File Format library for processing TIFF graphics files that can lead to the executionof arbitrary code via malformed TIFF files. For th...