USN-46-1: TIFF library vulnerability

A buffer overflow was discovered in the TIFF library. A TIFF file includes a value indicating the number of "directory entry" header fields contained in the file. If this value is -1, an invalid memory allocation was performed. A malicious image could be constructed which, when decoded, would hav...

CVE-2004-1308

CVE-2004-1308 is a heap-based buffer overflow in the LibTIFF code paths tif_dirread.c and tif_fax3.c affecting LibTIFF 3.5.7 and 3.7.0, exploitable via a TIFF file with a -1 directory entry count. Multiple connected advisories (e.g., Ubuntu USN-46-1, Red Hat/CentOS RHSA-2005:021) describe potenti...

CVE-2004-1255

CVE-2004-1255 involves a buffer overflow in the expandtabs function in 2fax 3.04, enabling remote code execution via a text file converted to TIFF. The vulnerability affects 2fax 3.04 and is exploitable over the network with low attack complexity and no authentication required, potentially yieldi...

CVE-2004-1308

Integer overflow in 1 tifdirread.c and 2 tiffax3.c for libtiff 3.5.7 and 3.7.0 allows remote attackers to execute arbitrary code via a TIFF file containing a TIFFASCII or TIFFUNDEFINED directory entry with a -1 entry count, which leads to a heap-based buffer overflow...

CVE-2004-1255

Buffer overflow in the expandtabs function in 2fax 3.04 allows remote attackers to execute arbitrary code via a text file that is converted to TIFF...

CVE-2004-1308

Integer overflow in 1 tifdirread.c and 2 tiffax3.c for libtiff 3.5.7 and 3.7.0 allows remote attackers to execute arbitrary code via a TIFF file containing a TIFFASCII or TIFFUNDEFINED directory entry with a -1 entry count, which leads to a heap-based buffer overflow...

iDEFENSE Security Advisory 12.21.04: libtiff Directory Entry Count Integer Overflow Vulnerability

libtiff Directory Entry Count Integer Overflow Vulnerability iDEFENSE Security Advisory 12.21.04 www.idefense.com/application/poi/display?id=174&type=vulnerabilities December 21, 2004 I. BACKGROUND This software provides support for the Tag Image File Format TIFF, a widely used format for storing...

iDEFENSE Security Advisory 12.21.04: libtiff STRIPOFFSETS Integer Overflow Vulnerability

libtiff STRIPOFFSETS Integer Overflow Vulnerability iDEFENSE Security Advisory 12.21.04 www.idefense.com/application/poi/display?id=173&type=vulnerabilities December 21, 2004 I. BACKGROUND libtiff provides support for the Tag Image File Format TIFF, a widely used format for storing image data. Mo...

CVE-2004-1307

Integer overflow in the TIFFFetchStripThing function in tifdirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overfl...

GLSA-200412-17 : kfax: Multiple overflows in the included TIFF library

The remote host is affected by the vulnerability described in GLSA-200412-17 kfax: Multiple overflows in the included TIFF library Than Ngo discovered that kfax contains a private copy of the TIFF library and is therefore subject to several known vulnerabilities see References. Impact : A remote...

kfax: Multiple overflows in the included TIFF library

Background KDE is a feature-rich graphical desktop environment for Linux and Unix-like Operating Systems. kfax part of kdegraphics is the KDE fax file viewer. Description Than Ngo discovered that kfax contains a private copy of the TIFF library and is therefore subject to several known...

[Full-Disclosure] [ GLSA 200412-02 ] PDFlib: Multiple overflows in the included TIFF library

Gentoo Linux Security Advisory GLSA 200412-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

PDFlib: Multiple overflows in the included TIFF library

Background PDFlib is a library providing functions to handle PDF files. It includes a modified TIFF library used to process TIFF images. Description The TIFF library is subject to several known vulnerabilities see GLSA 200410-11. Most of these overflows also apply to PDFlib. Impact A remote...

GLSA-200412-02 : PDFlib: Multiple overflows in the included TIFF library

The remote host is affected by the vulnerability described in GLSA-200412-02 PDFlib: Multiple overflows in the included TIFF library The TIFF library is subject to several known vulnerabilities see GLSA 200410-11. Most of these overflows also apply to PDFlib. Impact : A remote attacker could enti...

LibTIFF vulnerable to denial-of-service condition

Overview An Integer overflow in the LibTIFF library may allow a remote attacker to cause a divide-by-zero error that results in a denial-of-service condition. Description LibTIFF is a library used to encode and decode images in Tag Image File Format TIFF format. An integer overflow in the...

LibTIFF contains multiple heap-based buffer overflows

Overview LibTIFF contains multiple heap-based buffer overflows that may allow an attacker to execute arbitrary code or cause a denial-of-service condition. Description LibTIFF is a library used to encode and decode images in Tag Image File Format TIFF. Multiple LibTIFF routines contain buffer...

Debian DSA-567-1 : tiff - heap overflows

Several problems have been discovered in libtiff, the Tag Image File Format library for processing TIFF graphics files. An attacker could prepare a specially crafted TIFF graphic that would cause the client to execute arbitrary code or crash. The Common Vulnerabilities and Exposures Project has...

RHEL 2.1 / 3 : libtiff (RHSA-2004:577)

Updated libtiff packages that fix various buffer and integer overflows are now available. The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. During a source code audit, Chri...

CVE-2004-0804

Vulnerability in tifdirread.c for libtiff allows remote attackers to cause a denial of service application crash via a TIFF image that causes a divide-by-zero error when the number of row bytes is zero, a different vulnerability than CVE-2005-2452...

CVE-2004-0804

Vulnerability in tifdirread.c for libtiff allows remote attackers to cause a denial of service application crash via a TIFF image that causes a divide-by-zero error when the number of row bytes is zero, a different vulnerability than CVE-2005-2452...