1241 matches found
CVE-2016-3631
The 1 cpStrips and 2 cpTiles functions in the thumbnail tool in LibTIFF 4.0.6 and earlier allow remote attackers to cause a denial of service out-of-bounds read via vectors related to the bytecounts array variable...
CVE-2016-3631
The 1 cpStrips and 2 cpTiles functions in the thumbnail tool in LibTIFF 4.0.6 and earlier allow remote attackers to cause a denial of service out-of-bounds read via vectors related to the bytecounts array variable...
CVE-2016-3634
The tagCompare function in tifdirinfo.c in the thumbnail tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds read via vectors related to fieldtag matching...
CVE-2016-3633: Out-of-bounds Read
The setrow function in the thumbnail tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds read via vectors related to the src variable...
CVE-2016-3634: Out-of-bounds Read
The tagCompare function in tifdirinfo.c in the thumbnail tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds read via vectors related to fieldtag matching...
CVE-2016-3631: Out-of-bounds Read
The 1 cpStrips and 2 cpTiles functions in the thumbnail tool in LibTIFF 4.0.6 and earlier allow remote attackers to cause a denial of service out-of-bounds read via vectors related to the bytecounts array variable...
PT-2016-2786
Name of the Vulnerable Software and Affected Versions LibTIFF versions 4.0.6 and earlier Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds read, via vectors related to field tag matching in the tagCompare function. This is a problem related ...
PT-2016-2787
Name of the Vulnerable Software and Affected Versions LibTIFF versions 4.0.6 and earlier Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds read, via vectors related to the src variable. This is related to the setrow function in the thumbnail...
PT-2016-2788
Name of the Vulnerable Software and Affected Versions LibTIFF versions 4.0.6 and earlier Description The issue allows an attacker to cause a denial of service, specifically an out-of-bounds read, via vectors related to the bytecounts array variable. This is due to vulnerabilities in the 1 cpStrip...
CVE-2016-3632
The TIFFVGetField function in tifdirinfo.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds write or execute arbitrary code via a crafted TIFF image...
Internet Bug Bounty: Uninitialized Thumbail Data Leads To Memory Leakage in exif_process_IFD_in_TIFF
I found other code chunk that leads to memory leakage. exifprocessIFDinTIFFImageInfo, entryoffset, subsectionindex; if sectionindex!=SECTIONTHUMBNAIL && entrytag==TAGSUBIFD if ImageInfo-Thumbnail.filetype != IMAGEFILETYPEUNKNOWN && ImageInfo-Thumbnail.size && ImageInfo-Thumbnail.offset &&...
UBUNTU-CVE-2016-7128
The exifprocessIFDinTIFF function in ext/exif/exif.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles the case of a thumbnail offset that exceeds the file size, which allows remote attackers to obtain sensitive information from process memory via a crafted TIFF image...
Amazon Linux AMI : libtiff (ALAS-2016-733)
Multiple flaws have been discovered in libtiff. A remote attacker could exploit these flaws to cause a crash or memory corruption and, possibly, execute arbitrary code by tricking an application linked against libtiff into processing specially crafted files. CVE-2014-9655 , CVE-2015-1547 ,...
Scientific Linux Security Update : libtiff on 6.x i686/x86_64 (2016:1547)
The remote Scientific Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2016:1547-1 advisory. Security Fixes: Multiple flaws have been discovered in libtiff. A remote attacker could exploit these flaws to cause a crash or memory corruption...
libtiff: out-of-bounds read with malformed TIFF image in multiple tools
LibTIFF 4.0.3 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted TIFF image to the 1 checkInkNamesString function in tifdir.c in the thumbnail tool, 2 compresscontig function in tiff2bw.c in the tiff2bw tool, 3 putcontig8bitCIELab function in...
libtiff: out-of-bounds read with malformed TIFF image in multiple tools
LibTIFF 4.0.3 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted TIFF image to the 1 checkInkNamesString function in tifdir.c in the thumbnail tool, 2 compresscontig function in tiff2bw.c in the tiff2bw tool, 3 putcontig8bitCIELab function in...
Silicon Graphics LibTiff Denial of Service Vulnerability (CNVD-2016-02227)
Silicon Graphics LibTiff is the United States Silicon Graphics, Inc. of a read and write TIFF Tagged Image File Format file library. A denial of service vulnerability exists in the tagCompare function in the tifdirinfo.c file in Silicon Graphics LibTiff 4.0.6 and earlier versions. An attacker can...
Silicon Graphics LibTiff Denial of Service Vulnerability (CNVD-2016-02226)
Silicon Graphics LibTiff is the United States Silicon Graphics, Inc. of a read and write TIFF Tagged Image File Format file library. A denial of service vulnerability exists in the setrow function in the thumbnail.c file in Silicon Graphics LibTiff 4.0.6 and earlier versions. An attacker can...
Scald File - Critical - Remote Code Execution - SA-CONTRIB-2016-015
When a PDF is uploaded in Scald File, various tools can be executed if they're installed on the server, to try to generate a thumbnail out of that PDF. This is mitigated by the need to have the sufficient permissions to upload a file in Scald, and also to have at least one of the thumbnail creati...
onlinekhabar.com XSS vulnerability
Vulnerable URL: http://www.onlinekhabar.com/wp-content/themes/onlinekhabar/thumb.php?h=145px=100=http://www.onlinekhabar.com/wp-content/uploads/2016/01/Dayahang-Rai-with-Wife.jpg'"=235px=1 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Public...