CVE-2006-3463

The EstimateStripByteCounts function in TIFF library libtiff before 3.8.2 uses a 16-bit unsigned short when iterating over an unsigned 32-bit value, which allows context-dependent attackers to cause a denial of service via a large tdnstrips value, which triggers an infinite loop...

CVE-2006-3464

TIFF library libtiff before 3.8.2 allows context-dependent attackers to pass numeric range checks and possibly execute code, and trigger assert errors, via large offset values in a TIFF directory that lead to an integer overflow and other unspecified vectors involving "unchecked arithmetic...

CVE-2006-3465

Unspecified vulnerability in the custom tag support for the TIFF library libtiff before 3.8.2 allows remote attackers to cause a denial of service instability or crash and execute arbitrary code via unknown vectors...

CVE-2006-3461

CVE-2006-3461 is a heap-based buffer overflow in the PixarLog decoder of libtiff, tracked in CVE-2006-3461. Affected component: libtiff prior to 3.8.2. Impact described: context-dependent attackers could potentially execute arbitrary code. Public references in connected sources corroborate that t...

CVE-2006-3461

Heap-based buffer overflow in the PixarLog decoder in the TIFF library libtiff before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors...

CVE-2006-3462

The CVE-2006-3462 issue is a heap-based buffer overflow in the NeXT RLE decoder of libtiff (libtiff) prior to 3.8.2. It may allow context-dependent attackers to execute arbitrary code when decoding large RLE images. Connected documents confirm libtiff in affected packages and reference updates th...

CVE-2006-3459: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in the TIFF library libtiff before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow context-dependent attackers to execute arbitrary code or cause a denial of service via unspecified vectors, including a large tdircount value in the...

CVE-2006-3464: Undefined Security Weakness

TIFF library libtiff before 3.8.2 allows context-dependent attackers to pass numeric range checks and possibly execute code, and trigger assert errors, via large offset values in a TIFF directory that lead to an integer overflow and other unspecified vectors involving "unchecked arithmetic...

[SECURITY] [DSA 1137-1] New tiff packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1137-1 [email protected] http://www.debian.org/security/ Martin Schulze August 2nd, 2006 http://www.debian.org/security/faq -...

Multiple libtiff flaws (CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)

Heap-based buffer overflow in the PixarLog decoder in the TIFF library libtiff before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors...

Multiple libtiff flaws (CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)

TIFF library libtiff before 3.8.2 allows context-dependent attackers to pass numeric range checks and possibly execute code, and trigger assert errors, via large offset values in a TIFF directory that lead to an integer overflow and other unspecified vectors involving "unchecked arithmetic...

DSA-1137-1 tiff - several vulnerabilities

Bulletin has no description...

libTIFF: Multiple buffer overflows

Background libTIFF provides support for reading and manipulating TIFF images. Description A buffer overflow has been found in the t2pwritepdfstring function in tiff2pdf, which can been triggered with a TIFF file containing a DocumentName tag with UTF-8 characters. An additional buffer overflow ha...

CentOS 3 / 4 : libtiff (CESA-2006:0425)

Updated libtiff packages that fix several security flaws are now available for Red Hat Enterprise Linux. This update has been rated as having important security impact by the Red Hat Security Response Team. The libtiff package contains a library of functions for manipulating TIFF Tagged Image Fil...

Apple Mac OS X vulnerable to stack-based buffer overflow via specially crafted TIFF file

Overview Apple has reported a vulnerability in the way Mac OS X 10.4 systems handle TIFF images that could cause affected applications to crash or allow remote code execution.. Description TIFF Image File Format The TIFF image file format is a widely supported file format used for storing images...

Stack overflow

Stack-based buffer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.6 allows attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted TIFF image...

CVE-2006-1469

Stack-based buffer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.6 allows attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted TIFF image...

CVE-2006-1469

CVE-2006-1469 – Apple Mac OS X 10.4 up to 10.4.6 : A stack-based buffer overflow in ImageIO can be triggered by a crafted TIFF image, allowing a remote attacker to cause a crash and potentially execute arbitrary code. Affected product: Mac OS X 10.4.x (via ImageIO). Root cause: stack-based overfl...

CVE-2006-1469: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.6 allows attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted TIFF image...

Mandrake Linux Security Advisory : libtiff (MDKSA-2006:102)

A buffer overflow in the t2pwritepdfstring function in tiff2pdf in libtiff 3.8.2 and earlier allows attackers to cause a denial of service crash and possibly execute arbitrary code via a TIFF file with a DocumentName tag that contains UTF-8 characters, which triggers the overflow when a character...