Lucene search
+L

106 matches found

CNVD
CNVD
added 2021/03/10 12:0 a.m.42 views

Libtiff Integer Overflow Vulnerability

Libtiff is a library for reading and writing Tagged Image File Format abbreviated TIFF files. An integer overflow vulnerability exists in tifgetimage.c in libtiff. An attacker can exploit this vulnerability to inject and execute arbitrary code via specially crafted TIFF files...

7.8CVSS7.3AI score0.01922EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/02/09 12:0 a.m.14 views

Accusoft ImageGear 缓冲区错误漏洞

Accusoft ImageGear is a multi-platform, multi-language document imaging developer toolkit. An out-of-bounds write vulnerability exists in the TIFF parser of Accusoft ImageGear 19.8. An attacker can exploit this vulnerability via specially crafted files to achieve code execution...

9.8CVSS7.4AI score0.01855EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2020/12/22 12:0 a.m.11 views

The vulnerability of the realloc function in the Pillow image processing library allows a malicious actor to cause a service failure.

The vulnerability of the realloc function in the Pillow image processing library libImaging/TiffDecode.c is due to a numerical overflow during the processing of TIFF images. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

9.3CVSS6.5AI score0.01975EPSS
SaveExploits0References6Affected Software3
OSV
OSV
added 2020/01/03 1:15 a.m.6 views

PYSEC-2020-81

libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc...

8.8CVSS6.8AI score0.01975EPSS
SaveExploits0References6
CNVD
CNVD
added 2019/12/02 12:0 a.m.6 views

Free Photo Viewer Code Issue Vulnerability

Free Photo Viewer is a lightweight photo viewer. A code issue vulnerability exists in Free Photo Viewer. The vulnerability can be exploited to execute arbitrary code via specially crafted BMP and/or TIFF files...

7.8CVSS7.8AI score0.01734EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:0 a.m.6 views

The vulnerability of the QuantumTransferMode function (coders/tiff.c), a cross-platform library for working with graphics, allows a hacker to trigger a service failure.

The vulnerability of the QuantumTransferMode function coders/tiff.c in the cross-platform library for working with graphics in GraphicsMagick is related to a buffer overflow vulnerability. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially created...

5.5CVSS7.2AI score0.01932EPSS
SaveExploits0References7Affected Software2
CNVD
CNVD
added 2019/08/26 12:0 a.m.4 views

Binary Vulnerability in Windshade Viewer FyPicEditor.exe Handling TIFs

Wind Shadow Picture Viewer is a computer client picture viewing software, small and lightweight, simple interface, comprehensive features, compatible with hundreds of image formats, including commonly used JPG, BMP, PNG and other conventional image formats and PDS and other professional image...

6.9AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2018/07/19 12:0 a.m.5 views

PT-2018-16253 · Acd Systems · Canvas Draw

Name of the Vulnerable Software and Affected Versions: Canvas Draw version 4.0.0 Description: An out-of-bounds write exists in the TIFF parsing functionality. A specially crafted TIFF image can lead to an out-of-bounds write, overwriting arbitrary data, and potentially allowing an attacker to gai...

8.8CVSS8.4AI score0.01819EPSS
SaveExploits1References4
CNVD
CNVD
added 2018/07/18 12:0 a.m.2 views

LibTIFF Buffer Overflow Vulnerability (CNVD-2018-14917)

Libtiff is a library for reading and writing Tagged Image File Format abbreviated TIFF files. A buffer overflow vulnerability exists in TIFFFindField in tifdirinfo.c in LibTIFF 4.0.9. An attacker can exploit this vulnerability via TIFFVGetField, TIFFVGetFieldDefaulted, TIFFVStripSize,...

7.3AI score
SaveExploits0References1
Fedora
Fedora
added 2018/06/20 2:49 p.m.37 views

[SECURITY] Fedora 28 Update: mingw-libtiff-4.0.9-1.fc28

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...

9.8CVSS2AI score0.04427EPSS
SaveExploits4
Positive Technologies
Positive Technologies
added 2018/04/12 12:0 a.m.6 views

PT-2018-16255 · Talos +1 · Computerinsel Photoline +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a...

8.8CVSS8.2AI score0.01501EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2018/04/12 12:0 a.m.7 views

PT-2018-16262 · Talos +1 · Computerinsel Photoline +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned Description: A specially crafted TIFF image can cause an out-of-bounds write when processed, allowing an attacker to overwrite arbitrary data and potentially gain code execution by delivering a...

8.8CVSS8.5AI score0.01271EPSS
SaveExploits0References2
CNVD
CNVD
added 2018/02/24 12:0 a.m.3 views

Silicon Graphics LibTIFF 'TIFFPrintDirectory' Function Null Pointer Dereference Vulnerability

Silicon Graphics LibTIFF is a library for reading and writing TIFF Tagged Image File Format files from Silicon Graphics, USA. The library contains a number of command-line tools for processing TIFF files. A security vulnerability exists in the 'TIFFPrintDirectory' function of the tifprint.c file ...

6.5CVSS6.5AI score0.03021EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/02/08 12:0 a.m.3 views

Acme CADSee Handles TIFF Files with Denial of Service Vulnerability

Acme CADSee is a specialized viewer for CAD drawing files. Acme CADSee suffers from a memory corruption vulnerability when handling TIFF format files, which can cause an attacker to crash the program by constructing a TIFF format file, and if successfully exploited, can cause arbitrary code...

8AI score
SaveExploits0
CNVD
CNVD
added 2018/01/12 12:0 a.m.6 views

Blender Sequencer imb_loadtiff Integer Overflow Vulnerability

Blender is an open source cross-platform all-in-one 3D animation software, providing a series of animated short film production solutions from modeling, animation, materials, rendering, to audio processing, video editing and so on. An integer overflow vulnerability exists in Blender Sequencer...

8.8CVSS7.8AI score0.01824EPSS
SaveExploits1References1
OSV
OSV
added 2017/12/09 6:29 a.m.5 views

CVE-2017-16385

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. The vulnerability is caused by a buffer access with an incorrect length value in TIFF parsing durin...

8.8CVSS6.2AI score0.12847EPSS
SaveExploits0References3
OSV
OSV
added 2017/09/18 12:29 a.m.3 views

DEBIAN-CVE-2017-14528

The TIFFSetProfiles function in coders/tiff.c in ImageMagick 7.0.6 has incorrect expectations about whether LibTIFF TIFFGetField return values imply that data validation has occurred, which allows remote attackers to cause a denial of service use-after-free after an invalid call to TIFFSetField,...

6.5CVSS5.8AI score0.02616EPSS
SaveExploits1References1
OSV
OSV
added 2017/04/20 6:59 p.m.3 views

ALPINE-CVE-2016-5010

coders/tiff.c in ImageMagick before 6.9.5-3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TIFF file...

6.5CVSS6.6AI score0.02122EPSS
SaveExploits0References1
Fedora
Fedora
added 2017/04/14 5:24 p.m.38 views

[SECURITY] Fedora 26 Update: libtiff-4.0.7-5.fc26

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...

7.8CVSS2AI score0.02572EPSS
SaveExploits7
BDU FSTEC
BDU FSTEC
added 2017/03/31 12:0 a.m.13 views

The vulnerability of the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure or cause other effects.

The vulnerability of the coders/tiff.c component in the console-based graphic editor ImageMagick arises due to buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure or other effects such as the termination of the application by using a specially created...

6.8CVSS7.7AI score0.02119EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder