CVE-2010-2481

The TIFFExtractData macro in LibTIFF before 3.9.4 does not properly handle unknown tag types in TIFF directory entries, which allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted TIFF file...

CVE-2010-2483

The TIFFRGBAImageGet function in LibTIFF 3.9.0 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a TIFF file with an invalid combination of SamplesPerPixel and Photometric values...

CVE-2010-2481

The CVE refers to LibTIFF, where the TIFFExtractData macro (in LibTIFF versions prior to 3.9.4) mishandles unknown tag types in TIFF directory entries, enabling a remote attacker to trigger an out-of-bounds read and cause an application crash. Concrete mention appears in MiracleLinux AXSA-2010-37...

FreeBSD Ports: tiff

The remote host is missing an update to the system as announced in the referenced advisory. VID 8816bf3a-7929-11df-bcce-0018f3e2eb82 OpenVAS Vulnerability Test $ Description: Auto generated from VID 8816bf3a-7929-11df-bcce-0018f3e2eb82 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

PT-2010-1128 · Libtiff +1 · Libtiff +1

Name of the Vulnerable Software and Affected Versions: LibTIFF versions 3.9.4 and earlier tiff versions prior to 4.0.2-r1 Description: The issue arises from improper handling of an invalid td stripbytecount field in crafted TIFF files, leading to a denial of service through a NULL pointer...

FreeBSD Ports: tiff

The remote host is missing an update to the system as announced in the referenced advisory. VID 313da7dc-763b-11df-bcce-0018f3e2eb82 OpenVAS Vulnerability Test $ Description: Auto generated from VID 313da7dc-763b-11df-bcce-0018f3e2eb82 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

FreeBSD Ports: tiff

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: tiff

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PT-2010-1129 · Libtiff +2 · Libtiff +2

Name of the Vulnerable Software and Affected Versions: LibTIFF version 3.9.0 tiff versions prior to 4.0.2-r1 Description: The issue allows remote attackers to cause a denial of service, potentially leading to an out-of-bounds read and application crash, via a TIFF file with an invalid combination...

[SECURITY] Fedora 12 Update: libtiff-3.9.4-1.fc12

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...

CVE-2010-2597

The TIFFVStripSize function in tifstrip.c in LibTIFF 3.9.0 and 3.9.2 makes incorrect calls to the TIFFGetField function, which allows remote attackers to cause a denial of service application crash via a crafted TIFF image, related to "downsampled OJPEG input" and possibly related to a compiler...

CVE-2010-2596

The OJPEGPostDecode function in tifojpeg.c in LibTIFF 3.9.0 and 3.9.2, as used in tiff2ps, allows remote attackers to cause a denial of service assertion failure and application exit via a crafted TIFF image, related to "downsampled OJPEG input."...

CVE-2010-2597

The TIFFVStripSize function in tifstrip.c in LibTIFF 3.9.0 and 3.9.2 makes incorrect calls to the TIFFGetField function, which allows remote attackers to cause a denial of service application crash via a crafted TIFF image, related to "downsampled OJPEG input" and possibly related to a compiler...

CVE-2010-2595

The TIFFYCbCrtoRGB function in LibTIFF 3.9.0 and 3.9.2, as used in ImageMagick, does not properly handle invalid ReferenceBlackWhite values, which allows remote attackers to cause a denial of service application crash via a crafted TIFF image that triggers an array index error, related to...

CVE-2010-2598

LibTIFF in Red Hat Enterprise Linux RHEL 3 on x8664 platforms, as used in tiff2rgba, attempts to process image data even when the required compression functionality is not configured, which allows remote attackers to cause a denial of service via a crafted TIFF image, related to "downsampled OJPE...

DEBIAN-CVE-2010-2596

The OJPEGPostDecode function in tifojpeg.c in LibTIFF 3.9.0 and 3.9.2, as used in tiff2ps, allows remote attackers to cause a denial of service assertion failure and application exit via a crafted TIFF image, related to "downsampled OJPEG input."...

DEBIAN-CVE-2010-2595

The TIFFYCbCrtoRGB function in LibTIFF 3.9.0 and 3.9.2, as used in ImageMagick, does not properly handle invalid ReferenceBlackWhite values, which allows remote attackers to cause a denial of service application crash via a crafted TIFF image that triggers an array index error, related to...

DEBIAN-CVE-2010-2598

LibTIFF in Red Hat Enterprise Linux RHEL 3 on x8664 platforms, as used in tiff2rgba, attempts to process image data even when the required compression functionality is not configured, which allows remote attackers to cause a denial of service via a crafted TIFF image, related to "downsampled OJPE...

CVE-2010-2596

The OJPEGPostDecode function in tifojpeg.c in LibTIFF 3.9.0 and 3.9.2, as used in tiff2ps, allows remote attackers to cause a denial of service assertion failure and application exit via a crafted TIFF image, related to "downsampled OJPEG input."...

CVE-2010-2595

The TIFFYCbCrtoRGB function in LibTIFF 3.9.0 and 3.9.2, as used in ImageMagick, does not properly handle invalid ReferenceBlackWhite values, which allows remote attackers to cause a denial of service application crash via a crafted TIFF image that triggers an array index error, related to...