Computerinsel Photoline TIFF parsing function memory corruption vulnerability (CNVD-2018-08685)

PhotoLine is a multipurpose image and graphics editor. A memory corruption vulnerability exists in the TIFF parsing feature in Computerinsel Photoline 20.53. An attacker can exploit this vulnerability to cause out-of-bounds writes and overwrite arbitrary data via specially crafted TIFF images,...

CVE-2018-3861

A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution...

CVE-2018-3862

A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting...

CVE-2018-3868

A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution...

Design/Logic Flaw

A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution...

Design/Logic Flaw

A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution...

CVE-2018-3861

A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution...

Design/Logic Flaw

A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting...

CVE-2018-3868

A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution...

CVE-2018-3862

A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting...

CVE-2018-3862

CVE-2018-3862 is a memory-corruption in Computerinsel Photoline 20.53, where TIFF parsing of certain per-tile data can trigger an out-of-bounds write overwriting data, potentially enabling code execution. The TALOS-2018-0547 writeup details TIFF Bits Per Pixel handling that leads to the exploit p...

CVE-2018-3861

Cisco Talos details CVE-2018-3861 as a memory corruption in Computerinsel Photoline 20.53 TIFF parsing. The TIFF tile/scan parsing code can compute an address from image data without proper validation, enabling an out-of-bounds write that overwrites data and can lead to code execution. The TALOS-...

CVE-2018-3862

A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting...

CVE-2018-3868

A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution...

CVE-2018-3861

A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution...

CVE-2018-3868

PT-2018-16262 references Computerinsel Photoline and describes a TIFF-processing vulnerability that can cause an out-of-bounds write, overwriting data and potentially enabling code execution when a specially crafted TIFF image is processed. The document provides no specific affected software name...

Denial Of Service (DoS) Through Divide By Zero

libtiff.so is vulnerable to denial of service DoS through divide-by-zero. The vulnerability exists in the TIFFFax3fillruns function in tiffax3.c and occurs when a malicious TIFF image is used with the tiffcrop command...

Denial Of Service (DoS) Through Heap Buffer Overflow

libtiff.so is vulnerable to denial of service DoS through heap-based buffer overflow attacks. The vulnerability exists in the t2pwritepdf function in tools/tiff2pdf.c where a malicious TIFF file can cause denial of service DoS, and possibly other attacks...

PT-2018-16256 · Talos +1 · Computerinsel Photoline +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting data. This issue can potentially be...

Vulnerability Spotlight: Multiple Computerinsel PhotoLine PSD Code Execution Vulnerabilities

Discovered by Tyler Bohan of Cisco Talos Overview Today, Cisco Talos is disclosing a vulnerability within Computerinsel PhotoLine's PSD-parsing functionality. Photoline is an image processing tool used to modify and edit images, as well as other graphic-related material. This product has a large...