CVE-2017-7602: Integer Overflow or Wraparound

LibTIFF 4.0.7 has a signed integer overflow, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...

CVE-2017-7601: Improper Input Validation

LibTIFF 4.0.7 has a "shift exponent too large for 64-bit type long" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...

CVE-2017-7600: Improper Input Validation

LibTIFF 4.0.7 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...

CVE-2017-7599: Improper Input Validation

LibTIFF 4.0.7 has an "outside the range of representable values of type short" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...

CVE-2017-7598: Divide By Zero

tifdirread.c in LibTIFF 4.0.7 might allow remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted image...

CVE-2017-7597: Improper Input Validation

tifdirread.c in LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...

CVE-2017-7596: Improper Input Validation

LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...

CVE-2017-7594: Missing Release of Resource after Effective Lifetime

The OJPEGReadHeaderInfoSecTablesDcTable function in tifojpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service memory leak via a crafted image...

CVE-2017-7595: Divide By Zero

The JPEGSetupEncode function in tiffjpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted image...

CVE-2017-7593: Improper Restriction of Operations within the Bounds of a Memory Buffer

tifread.c in LibTIFF 4.0.7 does not ensure that tifrawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image...

CVE-2017-7592: Improper Input Validation

The putagreytile function in tifgetimage.c in LibTIFF 4.0.7 has a left-shift undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...

PT-2017-17826

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.0.7 Description The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and application crash, via a crafted image. This is due to a problem in the JPEGSetupEncode function in tiff...

PT-2017-17828

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.0.7 Description The issue is related to an "outside the range of representable values of type float" undefined behavior in tif dirread.c, which could allow remote attackers to cause a denial of service, potentially leading to...

PT-2017-17823

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.0.7 Description The issue is related to a left-shift undefined behavior in the putagreytile function, which could allow remote attackers to cause an application crash or possibly have other unspecified impacts by using a...

PT-2017-17824

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.0.7 Description The issue is related to the tif read.c file in LibTIFF, where tif rawdata is not properly initialized. This could allow remote attackers to obtain sensitive information from process memory by using a crafted...

PT-2017-17833

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.0.7 Description The issue is related to a signed integer overflow that could be triggered by a crafted image, potentially allowing remote attackers to cause a denial of service, such as an application crash, or possibly have...

PT-2017-17832

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.0.7 Description The issue is related to undefined behavior caused by a "shift exponent too large for 64-bit type long" in LibTIFF, potentially allowing remote attackers to cause a denial of service, such as an application...

PT-2017-17831

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.0.7 Description The issue is related to an "outside the range of representable values of type unsigned char" undefined behavior, potentially allowing remote attackers to cause a denial of service, such as an application crash...

PT-2017-17830

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.0.7 Description The issue is related to an "outside the range of representable values of type short" undefined behavior, which could allow remote attackers to cause a denial of service, such as an application crash, or possib...

PT-2017-17825

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.0.7 Description The issue allows remote attackers to cause a denial of service, specifically a memory leak, by providing a crafted image. This is due to a problem in the OJPEGReadHeaderInfoSecTablesDcTable function in tif...