CVE-2014-9655: Improper Restriction of Operations within the Bounds of a Memory Buffer

The 1 putcontig8bitYCbCr21tile function in tifgetimage.c or 2 NeXTDecode function in tifnext.c in LibTIFF allows remote attackers to cause a denial of service uninitialized memory access via a crafted TIFF image, as demonstrated by libtiff-cvs-1.tif and libtiff-cvs-2.tif...

Silicon Graphics LibTiff tiff2rgba tool denial of service vulnerability (CNVD-2016-02229)

Silicon Graphics LibTiff is the United States Silicon Graphics, Inc. of a read and write TIFF Tagged Image File Format file library. A denial of service vulnerability exists in the cvtbystrip function in Silicon Graphics LibTiff 4.0.6 and prior versions of the tiff2rgba tool. An attacker can...

CVE-2015-8784: Out-of-bounds Write

The NeXTDecode function in tifnext.c in LibTIFF allows remote attackers to cause a denial of service out-of-bounds write via a crafted TIFF image, as demonstrated by libtiff5.tif...

Silicon Graphics LibTiff rgb2ycbcr Tool Denial of Service Vulnerability

Silicon Graphics LibTiff is a library for reading and writing TIFF Tagged Image File Format files from the U.S. company Silicon Graphics. The library contains a number of command-line tools to deal with TIFF files. A denial of service vulnerability exists in the 'cvtClump' function in the rgb2ycb...

Silicon Graphics LibTiff rgb2ycbcr Tool Divide by Zero Error Vulnerability

Silicon Graphics LibTiff is a library for reading and writing TIFF Tagged Image File Format files from the U.S. company Silicon Graphics. The library contains a number of command-line tools to deal with TIFF files. A divide-by-zero error vulnerability exists in the rgb2ycbcr tool in Silicon...

Silicon Graphics LibTiff Denial of Service Vulnerability (CNVD-2016-02175)

Silicon Graphics LibTiff is the United States Silicon Graphics, Inc. of a read and write TIFF Tagged Image File Format file library. Silicon Graphics LibTiff 4.0.6 and earlier versions of the TIFFVGetField function in the tifdirinfo.c file has a security vulnerability that can be exploited by an...

Silicon Graphics LibTiff bmp2tiff tool denial of service vulnerability (CNVD-2016-02092)

Silicon Graphics LibTiff is a library for reading and writing TIFF files. The library contains some command line tools for working with TIFF files. A denial of service vulnerability in the 'ZIPEncode' function in the tifzip.c file in Silicon Graphics LibTiff's bmp2tiff tool allows an attacker to...

Silicon Graphics LibTiff bmp2tiff tool denial of service vulnerability (CNVD-2016-02091)

Silicon Graphics LibTiff is a library for reading and writing TIFF files. The library contains some command line tools for working with TIFF files. A denial of service vulnerability exists in the 'LZWEncode' function in the tiflzw.c file in Silicon Graphics LibTiff's bmp2tiff tool, which allows a...

Silicon Graphics LibTiff bmp2tiff Tool Denial of Service Vulnerability

Silicon Graphics LibTiff is a library for reading and writing TIFF files. The library contains some command line tools for working with TIFF files. A denial of service vulnerability exists in the 'DumpModeEncode' function in Silicon Graphics LibTiff's bmp2tiff tool, which allows an attacker to...

Silicon Graphics LibTiff tiff2rgba Tool Removes Zero Error Vulnerability

Silicon Graphics LibTiff is a library for reading and writing TIFF Tagged Image File Format files from the U.S. company Silicon Graphics. The library contains a number of command-line tools to deal with TIFF files. A divide-by-zero error vulnerability exists in the 'fpAcc' function in the...

Ubuntu 14.04 LTS : LibTIFF vulnerabilities (USN-2939-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2939-1 advisory. It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted...

Ubuntu: Security Advisory (USN-2939-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2939-1 LibTIFF vulnerabilities | Cloud Foundry

USN-2939-1 LibTIFF vulnerabilities Low Vendor Ubuntu, LibTIFF Versions Affected Ubuntu 14.04 Description LibTIFF could be made to crash or run programs as your login if it opened a specially crafted file. It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or...

USN-2939-1 tiff vulnerabilities

It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges...

USN-2939-1: LibTIFF vulnerabilities

It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges...

The vulnerability of the LibTIFF library, which allows a hacker to trigger a service failure

The vulnerability in the tifluv.c function of the LibTIFF library arises due to buffer overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure memory-bound reading by using a specially crafted TIFF image...

libtiff denial of service vulnerability (CNVD-2016-01057)

LibTiff is a library for reading and writing TIFF Tagged Image File Format files. The library contains some command line tools for working with TIFF files. A security vulnerability exists in LibTiff's tifluv.c file that stems from the presence of invalid 'sample/pixel' values in TIFF image...

libtiff denial of service vulnerability (CNVD-2016-01058)

libtiff is a library for reading and writing the Tagged Image File Format abbreviated as TIFF. A denial of service vulnerability exists in libtiff that allows an attacker to cause a denial of service via a crafted TIFF image...

libtiff denial of service vulnerability (CNVD-2016-01059)

LibTiff is a library for reading and writing TIFF Tagged Image File Format files. The library contains some command line tools for working with TIFF files. A security vulnerability exists in LibTiff's tifluv.c file. An attacker can exploit this vulnerability to cause a denial of service read acro...

FreeBSD : py-pillow -- Buffer overflow in TIFF decoding code (53252879-cf11-11e5-805c-5453ed2e2b49)

The Pillow maintainers report : Pillow 3.1.0 and earlier when linked against libtiff = 4.0.0 on x64 may overflow a buffer when reading a specially crafted tiff file. Specifically, libtiff = 4.0.0 changed the return type of TIFFScanlineSize from int32 to machine dependent int32|64. If the scanline...