33 matches found
graphicsmagick:coder_PTIF_fuzzer: Stack-buffer-overflow in _TIFFVGetField
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5790874811105280 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderPTIFfuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux Crash Type: Stack-buffer-overflow WRITE ...
graphicsmagick:coder_BIGTIFF_fuzzer: Stack-buffer-overflow in _TIFFVGetField
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=4549764084269056 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderBIGTIFFfuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux Crash Type: Stack-buffer-overflow WRI...
imagemagick:encoder_tiff_fuzzer: Stack-buffer-overflow in _TIFFVGetField
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6213537509539840 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodertifffuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 8...
Debian DSA-5333-1 : tiff - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5333 advisory. Several buffer overflow, divide by zero or out of bounds read/write vulnerabilities were discovered in tiff, the Tag Image File Format TIFF library and tools, whi...
Denial Of Service
libtiff.so is vulnerable to denial of service DoS attacks. A malicious user is able to cause denial of service conditions via a crafted TIFF file through TIFFVGetField function, resulting in an application crash...
CVE-2022-34526
A stack overflow flaw was found in the TIFFVGetField function of Tiffsplit. This vulnerability allows attackers to cause a denial of service DoS via a crafted TIFF file...
CVE-2022-34526
A stack overflow was discovered in the TIFFVGetField function of Tiffsplit v4.4.0. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted TIFF file parsed by the "tiffsplit" or "tiffcrop" utilities...
CVE-2022-34526
CVE-2022-34526 affects LibTIFF: a stack overflow in TIFFVGetField in Tiffsplit v4.4.0 can be triggered by processing crafted TIFF files via tiffsplit or tiffcrop, leading to DoS. The Connected documents confirm impact on the libtiff/tools, with advisories and mitigations from multiple vendors (e....
CVE-2022-34526: Out-of-bounds Write
A stack overflow was discovered in the TIFFVGetField function of Tiffsplit v4.4.0. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted TIFF file parsed by the "tiffsplit" or "tiffcrop" utilities...
imagemagick:ping_tiff64_fuzzer: Stack-buffer-overflow in _TIFFVGetField
Detailed Report: https://oss-fuzz.com/testcase?key=5330314666311680 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingtiff64fuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0xffc69370 Crash State: TIFFVGetField...
imagemagick:ping_tiff_fuzzer: Stack-buffer-overflow in _TIFFVGetField
Detailed Report: https://oss-fuzz.com/testcase?key=5590630746161152 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingtifffuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0xff91ce90 Crash State: TIFFVGetField...
leptonica:pix_rotate_shear_fuzzer: Dynamic-stack-buffer-overflow in _TIFFVGetField
Project: https://github.com/DanBloomberg/leptonica.git Detailed Report: https://oss-fuzz.com/testcase?key=6215738204487680 Project: leptonica Fuzzing Engine: afl Fuzz Target: pixrotateshearfuzzer Job Type: aflasanleptonica Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 8 Crash...
imagemagick:ping_ptif_fuzzer: Stack-buffer-overflow in _TIFFVGetField
Detailed Report: https://oss-fuzz.com/testcase?key=5572636592701440 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingptiffuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0xffd03350 Crash State: TIFFVGetField...
imagemagick:ping_ptif_fuzzer: Stack-buffer-overflow in _TIFFVGetField
Detailed Report: https://oss-fuzz.com/testcase?key=5137035853692928 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingptiffuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0xff989030 Crash State: TIFFVGetField...
imagemagick:ping_tiff_fuzzer: Stack-buffer-overflow in _TIFFVGetField
Detailed Report: https://oss-fuzz.com/testcase?key=5748561614733312 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingtifffuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0xff974750 Crash State: TIFFVGetField...
Denial Of Service (DoS)
libtiff.so is vulnerable to denial of service DoS or remote code execution. It can happen because the attacker can perform Illegal writes by sending a malicious TIFF file to the TIFFVGetField function in tifdirinfo.c. It can also cause a remote code execution if an attacker writes malicious code...
LibTIFF - _TIFFVGetField (tiffsplit) Out-of-Bounds Read Exploit
Exploit for linux platform in category dos / poc Source: http://bugzilla.maptools.org/showbug.cgi?id=2693 On 4.0.7: tiffsplit $FILE ==2007== Invalid read of size 4 ==2007== at 0x40CD1A: TIFFVGetField tifdir.c:1072 ==2007== by 0x41B2C5: TIFFVGetField tifdir.c:1198 ==2007== by 0x41B2C5: TIFFGetFiel...
LibTIFF - _TIFFVGetField (tiffsplit) Out-of-Bounds Read
LibTIFF - TIFFVGetField tiffsplit Out-of-Bounds Read Source: http://bugzilla.maptools.org/showbug.cgi?id=2693 On 4.0.7: tiffsplit $FILE ==2007== Invalid read of size 4 ==2007== at 0x40CD1A: TIFFVGetField tifdir.c:1072 ==2007== by 0x41B2C5: TIFFVGetField tifdir.c:1198 ==2007== by 0x41B2C5:...
