18 matches found
CVE-2026-34546 iccDEV: UB at TiffImg.h
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted TIFF input can trigger Undefined Behavior UB due to division by zero in the TIFF handling code paths used by iccTiffDump. This issue has been patched in version 2.3.1.6...
PT-2026-29391
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted TIFF input can trigger Undefined Behavior UB due to division by zero in the TIFF handling code paths used by iccTiffDump. This issue has been patched in version 2.3.1.6...
EUVD-2018-16701
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2016-8707
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable out of bounds write exists in the handling of compressed TIFF images in ImageMagicks's convert utility. A crafted TIFF document can lead to an ou...
USN-5313-1 openjdk-lts, openjdk-17 vulnerabilities
It was discovered that OpenJDK incorrectly handled deserialization filters. An attacker could possibly use this issue to insert, delete or obtain sensitive information. CVE-2022-21248 It was discovered that OpenJDK incorrectly read uncompressed TIFF files. An attacker could possibly use this issu...
CVE-2021-44003
A vulnerability has been identified in JT2Go All versions V13.2.0.5, Teamcenter Visualization All versions V13.2.0.5. The TiffLoader.dll is vulnerable to use of uninitialized memory while parsing user supplied TIFF files. This could allow an attacker to cause a denial-of-service condition...
CVE-2020-15629
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
PT-2019-13260 · Foxit · Foxit Studio Photo
Name of the Vulnerable Software and Affected Versions: Foxit Studio Photo version 3.6.6.909 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The...
PT-2019-13259 · Foxit · Foxit Studio Photo
Name of the Vulnerable Software and Affected Versions: Foxit Studio Photo version 3.6.6.909 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The...
Out-of-bounds memory read vulnerability in multiple Adobe products (CNVD-2018-05012)
Acrobat DC Continuous Track and so on are the United States of America, Adobe Adobe products. Acrobat DC Continuous Track is a desktop version of the continuous update of PDF solutions. reader DC Continuous Track is a PDF reading tool continuous update version. string literal parser is one of the...
Out-of-bounds memory read vulnerability in multiple Adobe products (CNVD-2018-05013)
Acrobat DC Continuous Track and so on are the United States of America, Adobe Adobe products. Acrobat DC Continuous Track is a desktop version of the continuous update of PDF solutions. reader DC Continuous Track is a PDF reading tool continuous update version. string literal parser is one of the...
Out-of-bounds memory read vulnerability in multiple Adobe products (CNVD-2018-05008)
Acrobat DC Continuous Track and so on are the United States of America Ordoby Adobe company's products. Acrobat DC Continuous Track is a desktop version of the continuous update of the PDF solution. Reader DC Continuous Track is a continuous update of the version of the PDF reading tool. XPS engi...
Multiple Memory Corruption Vulnerabilities in STDU Explorer's Handling of TIFFs
STDU Explorer is an image file and e-book format viewer. STDU Explorer has multiple memory corruption vulnerabilities in the handling of TIFF images, which can be exploited to cause the program to crash by constructing a malformed TIFF image, or can be successfully exploited to cause arbitrary co...
Multiple Memory Corruption Vulnerabilities in STDU Converter Lite's TIFF Processing
STDU Converter Lite is a document format conversion tool. STDU Converter Lite is the result of multiple memory corruption vulnerabilities in the handling of TIFF images, which can be exploited by attackers to cause a program crash by constructing malformed TIFF-formatted images, or successfully...
PT-2016-7555 · Imagemagick +2 · Imagemagick +2
Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: An exploitable out of bounds write exists in the handling of compressed TIFF images in ImageMagick's convert utility. A crafted TIFF document can lead to an out of bounds write, which i...
Ubuntu: Security Advisory (USN-524-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu Update for openoffice.org/-amd64 vulnerability USN-524-1
Ubuntu Update for Linux kernel vulnerabilities USN-524-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5241.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for openoffice.org/-amd64 vulnerability USN-524-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
USN-524-1: OpenOffice.org vulnerability
An integer overflow was discovered in the TIFF handling code in OpenOffice. If a user were tricked into loading a malicious TIFF image, a remote attacker could execute arbitrary code with user privileges...