CVE-2016-3945

Multiple integer overflows in the 1 cvtbystrip and 2 cvtbytile functions in the tiff2rgba tool in LibTIFF 4.0.6 and earlier, when -b mode is enabled, allow remote attackers to cause a denial of service crash or execute arbitrary code via a crafted TIFF image, which triggers an out-of-bounds write...

CVE-2016-3990

CVE-2016-3990 is a heap-based buffer overflow in LibTIFF 4.0.6 and earlier, located in horizontalDifference8() of tif_pixarlog.c. Exploitation via a crafted TIFF image passed to tiffcp can cause denial of service or arbitrary code execution. Public advisories from Debian and Arch Linux, and F5 no...

CVE-2016-3991

Heap-based buffer overflow in the loadImage function in the tiffcrop tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds write or execute arbitrary code via a crafted TIFF image with zero tiles...

CVE-2016-3632

The TIFFVGetField function in tifdirinfo.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds write or execute arbitrary code via a crafted TIFF image...

CVE-2016-3990

Heap-based buffer overflow in the horizontalDifference8 function in tifpixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service crash or execute arbitrary code via a crafted TIFF image to tiffcp...

UBUNTU-CVE-2016-3991

Heap-based buffer overflow in the loadImage function in the tiffcrop tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds write or execute arbitrary code via a crafted TIFF image with zero tiles...

CVE-2016-3945

Multiple integer overflows in the 1 cvtbystrip and 2 cvtbytile functions in the tiff2rgba tool in LibTIFF 4.0.6 and earlier, when -b mode is enabled, allow remote attackers to cause a denial of service crash or execute arbitrary code via a crafted TIFF image, which triggers an out-of-bounds write...

UBUNTU-CVE-2016-3945

Multiple integer overflows in the 1 cvtbystrip and 2 cvtbytile functions in the tiff2rgba tool in LibTIFF 4.0.6 and earlier, when -b mode is enabled, allow remote attackers to cause a denial of service crash or execute arbitrary code via a crafted TIFF image, which triggers an out-of-bounds write...

UBUNTU-CVE-2016-3632

The TIFFVGetField function in tifdirinfo.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds write or execute arbitrary code via a crafted TIFF image...

openSUSE Security Update : tiff (openSUSE-2016-1089)

This update for tiff fixes the following issues : - CVE-2015-8781, CVE-2015-8782, CVE-2015-8783: Out-of-bounds writes for invalid images bsc964225 - CVE-2016-3186: Buffer overflow in gif2tiff bnc973340. - CVE-2016-5875: heap-based buffer overflow when using the PixarLog compressionformat bsc98735...

Internet Bug Bounty: Uninitialized Thumbail Data Leads To Memory Leakage in exif_process_IFD_in_TIFF

I found other code chunk that leads to memory leakage. exifprocessIFDinTIFFImageInfo, entryoffset, subsectionindex; if sectionindex!=SECTIONTHUMBNAIL && entrytag==TAGSUBIFD if ImageInfo-Thumbnail.filetype != IMAGEFILETYPEUNKNOWN && ImageInfo-Thumbnail.size && ImageInfo-Thumbnail.offset &&...

CVE-2016-7128

The exifprocessIFDinTIFF function in ext/exif/exif.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles the case of a thumbnail offset that exceeds the file size, which allows remote attackers to obtain sensitive information from process memory via a crafted TIFF image...

CVE-2016-7128

The exifprocessIFDinTIFF function in ext/exif/exif.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles the case of a thumbnail offset that exceeds the file size, which allows remote attackers to obtain sensitive information from process memory via a crafted TIFF image...

Code injection

The exifprocessIFDinTIFF function in ext/exif/exif.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles the case of a thumbnail offset that exceeds the file size, which allows remote attackers to obtain sensitive information from process memory via a crafted TIFF image...

CVE-2016-7128

The exifprocessIFDinTIFF function in ext/exif/exif.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles the case of a thumbnail offset that exceeds the file size, which allows remote attackers to obtain sensitive information from process memory via a crafted TIFF image...

CVE-2016-7128

Removed by vendor...

CVE-2016-7128

The CVE-2016-7128 entry affects PHP: the exif_process_IFD_in_TIFF function in ext/exif/exif.c mishandles a thumbnail offset that exceeds the TIFF file size, enabling remote attackers to read sensitive data from process memory via a crafted TIFF image. Affected versions: PHP before 5.6.25 and 7.x ...

SUSE SLED12 / SLES12 Security Update : tiff (SUSE-SU-2016:2271-1)

This update for tiff fixes the following issues : - CVE-2015-8781, CVE-2015-8782, CVE-2015-8783: Out-of-bounds writes for invalid images bsc964225 - CVE-2016-3186: Buffer overflow in gif2tiff bnc973340. - CVE-2016-5875: heap-based buffer overflow when using the PixarLog compressionformat bsc98735...

openSUSE Security Update : tiff (openSUSE-2016-1069)

This update for tiff fixes the following issues : - CVE-2016-3623: A divide by zero was fixed in the rgb2ycbcr tool. bsc974618 - CVE-2016-3945: An out-of-bounds write was fixed in the tiff2rgba tool. bsc974614 - CVE-2016-3990: An out-of-bounds write in horizontalDifference8 in tiffcp tool bsc9750...

CVE-2016-7128

The exifprocessIFDinTIFF function in ext/exif/exif.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles the case of a thumbnail offset that exceeds the file size, which allows remote attackers to obtain sensitive information from process memory via a crafted TIFF image...