exiv2: null pointer dereference in the Exiv2::DataValue::toLong function in value.cpp

Exiv2 0.26 has a Null Pointer Dereference in the Exiv2::DataValue::toLong function in value.cpp, related to crafted metadata in a TIFF file...

exiv2: infinite recursion in Exiv2::Image::printTiffStructure in file image.cpp resulting in denial of service

An issue was discovered in Exiv2 0.27. There is infinite recursion at Exiv2::Image::printTiffStructure in the file image.cpp. This can be triggered by a crafted file. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified other impact...

RHEL 8 : libtiff (RHSA-2020:1688)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1688 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: integer overflow i...

JetBrains YouTrack Denial of Service Vulnerability

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in JetBrains YouTrack versions prior to 2020.1.659. An...

CVE-2020-11693

JetBrains YouTrack before 2020.1.659 was vulnerable to DoS that could be caused by attaching a malformed TIFF file to an issue...

CVE-2020-11693

JetBrains YouTrack before 2020.1.659 was vulnerable to DoS that could be caused by attaching a malformed TIFF file to an issue...

Design/Logic Flaw

JetBrains YouTrack before 2020.1.659 was vulnerable to DoS that could be caused by attaching a malformed TIFF file to an issue...

CVE-2020-11693

JetBrains YouTrack before 2020.1.659 was vulnerable to DoS that could be caused by attaching a malformed TIFF file to an issue...

CVE-2020-11693

CVE-2020-11693 affects JetBrains YouTrack prior to 2020.1.659. The vulnerability allows denial of service when a malformed TIFF file is attached to an issue. The issue is documented in NVD/NVD-style records and JetBrains’ Security Bulletin Q1 2020; remediation is to upgrade YouTrack to version 20...

EulerOS Virtualization 3.0.2.2 : libtiff (EulerOS-SA-2020-1447)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service TIFFSetupStrips heap-based buffe...

The vulnerability in the backend/tiff/tiff-document.c component of the Evince document viewing software allows a hacker to execute arbitrary code.

The vulnerability in the backend/tiff/tiff-document.c component of the Evince document viewing software arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

EulerOS Virtualization 3.0.2.2 : gd (EulerOS-SA-2020-1464)

According to the versions of the gd package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Integer overflow in gdio.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to have unspecified impact via...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2020-1447)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. A heap-based buffer overflow flaw was found in the way libtiff processed certain TIFF Internet Fax image files, compressed with the CCITT Group 4 compression algorithm. An attacker could use this flaw to create a specially-crafted TIFF file that,...

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. The vulnerability exists as a heap-based buffer overflow flaw was found in the way libtiff processed certain TIFF files encoded with a 4-bit run-length encoding scheme from ThunderScan. An attacker could use this flaw to create a specially-crafte...

Denial Of Service (DoS)

The libtiff packages is vulnerable to Denial Of Service DoS. An input validation flaw was discovered in libtiff. An attacker could use this flaw to create a specially-crafted TIFF file that, when opened, would cause an application linked against libtiff to crash...

Denial Of Service (DoS)

The libtiff package is vulnerable to Denial Of Service DoS.Due to integer overflow flaws discovered in libtiff, an attacker can create a specially-crafted TIFF file that, when opened, would cause an application linked against libtiff to crash or, possibly, execute arbitrary code...

Arbitrary Code Execution

cups is vulnerable to arbitrary code execution. An integer overflow flaw, leading to a heap-based buffer overflow, was discovered in the Tagged Image File Format TIFF decoding routines used by the CUPS image-converting filters, "imagetops" and "imagetoraster". An attacker could create a malicious...

Denial Of Service (DoS)

libtiff is vulnerable to denial of service DoS. The vulnerability exists as a buffer underwrite flaw was found in libtiff's Lempel-Ziv-Welch LZW compression algorithm decoder. An attacker could create a specially-crafted LZW-encoded TIFF file, which once opened by an unsuspecting user, would caus...

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. The vulnerability exists as several integer overflow flaws, leading to heap-based buffer overflows, were found in various libtiff color space conversion tools. An attacker could create a specially-crafted TIFF file, which once opened by an...