6795 matches found
SUSE SLES12 Security Update : tiff (SUSE-SU-2024:2979-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2979-1 advisory. - CVE-2024-7006: Fixed null pointer dereference in tifdirinfo.c bsc1228924 Tenable has extracted the preceding description block directly fr...
SUSE: Security Advisory (SUSE-SU-2024:2979-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2024:2979-1 Security update for tiff
This update for tiff fixes the following issues: - CVE-2024-7006: Fixed null pointer dereference in tifdirinfo.c bsc1228924...
CVE-2024-7006 vulnerabilities
Vulnerabilities for packages: tiff...
CVE-2024-7006 vulnerabilities
Vulnerabilities for packages: tiff...
EulerOS 2.0 SP11 : libtiff (EulerOS-SA-2024-2087)
According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801. This flaw...
libtiff: heap-based buffer overflow in cpStripToTile() in tools/tiffcp.c
An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash...
libtiff: Heap-based buffer overflow in ChopUpSingleUncompressedStrip in tif_dirread.c
ChopUpSingleUncompressedStrip in tifdirread.c in LibTIFF 4.0.9 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted TIFF file, as demonstrated by tiff2pdf...
libtiff: Buffer Overflow via /libtiff/tools/tiffcrop.c
A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to a heap-based buffer overflow in the processCropSelections function in tools/tiffcrop.c, resulting in a denial of service...
libtiff: Segment fault in libtiff in TIFFReadRGBATileExt() leading to denial of service
A segment fault SEGV flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service...
SUSE CVE-2024-28566
Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to execute arbitrary code via the AssignPixel function when reading images in TIFF format...
SUSE CVE-2024-28567
Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to cause a denial of service DoS via the FreeImageCreateICCProfile function when reading images in TIFF format...
SUSE CVE-2024-28568
Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to cause a denial of service DoS via the readiptcprofile function when reading images in TIFF format...
CLSA-2024-1722529534 libtiff: Fix of 2 CVEs
CVE-2023-52356: added proper validation and boundary checks to prevent the SEGV and potential heap-buffer overflow - CVE-2023-52355: added functionality to set a maximum possible allocation size in bytes in order to prevent out-of-memory issues when opening a TIFF file and added memory limit...
EulerOS 2.0 SP9 : libtiff (EulerOS-SA-2024-1939)
According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libtiff 4.5.0 is vulnerable to Buffer Overflow in uvencode when libtiff reads a corrupted little-endian TIFF file and specifies the output to be...
PT-2024-5544 · Libtiff +1 · Libtiff +1
Name of the Vulnerable Software and Affected Versions: LibTIFF affected versions not specified Description: The issue is related to the TIFFReadEncodedStrip function in the LibTIFF library, which is associated with an uncontrolled resource consumption. This can be exploited by a remote attacker t...
Number withdrawn
LibTIFF is a LibTIFF open source library for reading and writing TIFF Tagged Image File Format files. The library contains a number of command line tools for working with TIFF files. This CVE number has been withdrawn...
CVE-2024-20785 Adobe Indesign 2024 TIFF File Parsing Memory Corruption Remote Code Execution vulnerability
InDesign Desktop versions ID19.3, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2024-20785
Adobe InDesign Desktop versions ID19.3, ID18.5.2 and earlier are affected by a heap-based buffer overflow that could allow arbitrary code execution in the context of the current user when a victim opens a malicious file. Exploitation requires user interaction (open of a crafted file). Affected pr...