Lucene search
+L

6811 matches found

Veracode
Veracode
added 2019/05/02 5:45 a.m.25 views

Denial Of Service (DoS)

libtiff is vulnerable to heap-based buffer overflow vulnerability. Remote attackers can cause a denial of service out-of-bounds write or execute arbitrary code via a crafted TIFF image with zero tiles. loadImage function in tiffcrop.c. loadImage will read the numbers of tiles by calling...

7.8CVSS8.1AI score0.03853EPSS
SaveExploits0References13Affected Software1
Veracode
Veracode
added 2019/05/02 5:45 a.m.20 views

Denial Of Service (DoS)

libtiff is vulnerable to heap-based buffer overflow vulnerability. This is because it fails to properly bounds check user-supplied data before copying it into an insufficiently sized buffer. Attackers can exploit this issue to execute arbitrary commands via a crafted TIFF image to tiffcp or cause...

7.8CVSS9AI score0.03886EPSS
SaveExploits0References13Affected Software2
Veracode
Veracode
added 2019/05/02 5:45 a.m.40 views

Denial Of Service (DoS)

libtiff is vulnerable to denial of service DoS attacks. This allows remote attackers to affect the availability via a crafted TIFF image, as demonstrated by libtiff-cvs-1.tif and libtiff-cvs-2.tif...

6.5CVSS6.9AI score0.02534EPSS
SaveExploits0References10Affected Software1
Veracode
Veracode
added 2019/05/02 5:45 a.m.25 views

Denial Of Service (DoS)

libtiff is vulnerable to denial of service DOS attacks. This allows remote attackers to affect the availability via a crafted TIFF image, as demonstrated by libtiff5.tif...

6.5CVSS6.9AI score0.03341EPSS
SaveExploits1References12Affected Software1
Veracode
Veracode
added 2019/05/02 5:45 a.m.30 views

Denial Of Service (DoS)

LibTIFF is vulnerable to denial of service DoS attacks. This allows an attacker to cause application crash via a crafted TIFF image that is mishandled by the TIFFWriteScanline function...

6.5CVSS6.8AI score0.0383EPSS
SaveExploits1References16Affected Software1
Veracode
Veracode
added 2019/05/02 5:39 a.m.50 views

Remote Code Execution (RCE) Via Memory Corruption

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php55 packages provide a recent stable release of PHP with the PEAR 1.9.4, memcache 3.0.8, and mongo 1.4.5 PECL extensions, and a number of additional utilities. The php55 packages have been upgraded to...

7.5CVSS9.2AI score0.53166EPSS
SaveExploits33References24Affected Software6
Veracode
Veracode
added 2019/05/02 5:39 a.m.52 views

Out-Of-Bounds Read

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The php55 packages provide a recent stable release of PHP with the PEAR 1.9.4, memcache 3.0.8, and mongo 1.4.5 PECL extensions, and a number of additional utilities. The php55 packages have been upgraded to...

7.5CVSS9.2AI score0.53166EPSS
SaveExploits33References22Affected Software5
Veracode
Veracode
added 2019/05/02 5:13 a.m.53 views

Memory Corruption And Code Execution

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. A buffer overflow flaw was found in the Exif extension. A specially crafted JPEG or TIFF file could cause a PHP application using the exifthumbnail function to crash or, possibly, execute arbitrary code with the...

7.5CVSS7.7AI score0.28862EPSS
SaveExploits3References11Affected Software1
Veracode
Veracode
added 2019/05/02 5:01 a.m.38 views

Denial Of Service (DoS)

The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. A heap-based buffer overflow and a use-after-free flaw were found in the tiff2pdf tool. An attacker could use these flaws to create a specially crafted TIFF file that would cause tiff2pdf to...

9.3CVSS9.7AI score0.11823EPSS
SaveExploits1References11Affected Software1
Veracode
Veracode
added 2019/05/02 5:01 a.m.30 views

Denial Of Service (DoS)

The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. A heap-based buffer overflow and a use-after-free flaw were found in the tiff2pdf tool. An attacker could use these flaws to create a specially crafted TIFF file that would cause tiff2pdf to...

9.3CVSS9.7AI score0.11823EPSS
SaveExploits1References13Affected Software1
Veracode
Veracode
added 2019/05/02 5:01 a.m.41 views

Denial Of Service (DoS)

The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. A heap-based buffer overflow and a use-after-free flaw were found in the tiff2pdf tool. An attacker could use these flaws to create a specially crafted TIFF file that would cause tiff2pdf to...

9.3CVSS9.7AI score0.11823EPSS
SaveExploits1References17Affected Software1
Veracode
Veracode
added 2019/05/02 5:01 a.m.40 views

Denial Of Service (DoS)

The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. A heap-based buffer overflow and a use-after-free flaw were found in the tiff2pdf tool. An attacker could use these flaws to create a specially crafted TIFF file that would cause tiff2pdf to...

9.3CVSS9.7AI score0.11823EPSS
SaveExploits1References13Affected Software1
Veracode
Veracode
added 2019/05/02 5:01 a.m.48 views

Denial Of Service (DoS)

The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. A heap-based buffer overflow and a use-after-free flaw were found in the tiff2pdf tool. An attacker could use these flaws to create a specially crafted TIFF file that would cause tiff2pdf to...

9.3CVSS9.7AI score0.11823EPSS
SaveExploits1References9Affected Software1
Veracode
Veracode
added 2019/05/02 4:42 a.m.31 views

Denial Of Service (DoS) And Remote Code Execution (RCE)

The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. libtiff did not properly convert between signed and unsigned integer values, leading to a buffer overflow. An attacker could use this flaw to create a specially-crafted TIFF file that, when...

7.5CVSS5.9AI score0.06459EPSS
SaveExploits0References16Affected Software1
Veracode
Veracode
added 2019/05/02 4:42 a.m.39 views

Denial Of Service (DoS) And Remote Code Execution (RCE)

The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. A heap-based buffer overflow flaw was found in the way libtiff processed certain TIFF images using the Pixar Log Format encoding. An attacker could create a specially-crafted TIFF file that,...

6.8CVSS7.3AI score0.13521EPSS
SaveExploits1References15Affected Software1
Veracode
Veracode
added 2019/05/02 4:42 a.m.35 views

Denial Of Service (DoS) And Remote Code Execution (RCE)

The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. A heap-based buffer overflow flaw was found in the way libtiff processed certain TIFF images using the Pixar Log Format encoding. An attacker could create a specially-crafted TIFF file that,...

6.8CVSS7.3AI score0.13521EPSS
SaveExploits1References13Affected Software1
Veracode
Veracode
added 2019/05/02 4:42 a.m.37 views

Denial Of Service (DoS) And Remote Code Execution (RCE)

The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. A heap-based buffer overflow flaw was found in the way libtiff processed certain TIFF images using the Pixar Log Format encoding. An attacker could create a specially-crafted TIFF file that,...

6.8CVSS7.3AI score0.13521EPSS
SaveExploits1References15Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/05/01 12:00 a.m.42 views

EulerOS 2.0 SP5 : libtiff (EulerOS-SA-2019-1313)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In LibTIFF 4.0.9, there is a NULL pointer dereference in the TIFFWriteDirectorySec function in tifdirwrite.c that will lead to a denial of...

8.8CVSS6.5AI score0.03869EPSS
SaveExploits3References4
Tenable Nessus
Tenable Nessus
added 2019/04/30 12:00 a.m.39 views

EulerOS 2.0 SP2 : ImageMagick (EulerOS-SA-2019-1296)

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In ImageMagick 7.0.8-36 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attack...

8.8CVSS7.3AI score0.05916EPSS
SaveExploits2References3
OSV
OSV
added 2019/04/29 4:29 p.m.3 views

DEBIAN-CVE-2019-11597

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file...

8.1CVSS9AI score0.03708EPSS
SaveExploits1References1
Rows per page
Query Builder