Out-of-bounds

The TIFFRGBAImageGet function in LibTIFF 3.9.0 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a TIFF file with an invalid combination of SamplesPerPixel and Photometric values...

Code injection

LibTIFF 3.9.0 ignores tags in certain situations during the first stage of TIFF file processing and does not properly handle this during the second stage, which allows remote attackers to cause a denial of service application crash via a crafted file, a different vulnerability than CVE-2010-2481...

Out-of-bounds

The TIFFExtractData macro in LibTIFF before 3.9.4 does not properly handle unknown tag types in TIFF directory entries, which allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted TIFF file...

CVE-2010-2631

LibTIFF 3.9.0 ignores tags in certain situations during the first stage of TIFF file processing and does not properly handle this during the second stage, which allows remote attackers to cause a denial of service application crash via a crafted file, a different vulnerability than CVE-2010-2481...

[SECURITY] Fedora 13 Update: mingw32-libtiff-3.9.4-1.fc13

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...

CVE-2010-2631

LibTIFF 3.9.0 ignores tags in certain situations during the first stage of TIFF file processing and does not properly handle this during the second stage, which allows remote attackers to cause a denial of service application crash via a crafted file, a different vulnerability than CVE-2010-2481...

CVE-2010-2630

Affected software: LibTIFF 3.9.0. Vulnerability: TIFFReadDirectory fails to properly validate the data types of codec-specific TIFF tags with an out-of-order position in a TIFF file. Impact: remote denial of service (application crash) via a crafted TIFF image. Root cause: insufficient validation...

CVE-2010-2630

The TIFFReadDirectory function in LibTIFF 3.9.0 does not properly validate the data types of codec-specific tags that have an out-of-order position in a TIFF file, which allows remote attackers to cause a denial of service application crash via a crafted file, a different vulnerability than...

CVE-2010-2630

The TIFFReadDirectory function in LibTIFF 3.9.0 does not properly validate the data types of codec-specific tags that have an out-of-order position in a TIFF file, which allows remote attackers to cause a denial of service application crash via a crafted file, a different vulnerability than...

CVE-2010-2631

LibTIFF 3.9.0 ignores tags in certain situations during the first stage of TIFF file processing and does not properly handle this during the second stage, which allows remote attackers to cause a denial of service application crash via a crafted file, a different vulnerability than CVE-2010-2481...

CVE-2010-2631

LibTIFF vulnerability CVE-2010-2631 affects LibTIFF 3.9.0 where first-stage TIFF tag handling and second-stage processing can lead to an application crash (DoS) via a crafted TIFF file. Connected sources also enumerate related LibTIFF issues (e.g., CVE-2010-2481, CVE-2010-2483, CVE-2010-2595, CVE...

CVE-2010-2482

LibTIFF 3.9.4 and earlier does not properly handle an invalid tdstripbytecount field, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted TIFF file, a different vulnerability than CVE-2010-2443...

CVE-2010-2482

CVE-2010-2482 affects libTIFF up to version 3.9.4, where an invalid td_stripbytecount field in a TIFF file can cause a NULL pointer dereference and application crash (remote DoS) when processing the image. This is part of a set of libTIFF issues described in multiple advisories (e.g., Debian DSA-...

CVE-2010-2483

The TIFFRGBAImageGet function in LibTIFF 3.9.0 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a TIFF file with an invalid combination of SamplesPerPixel and Photometric values...

CVE-2010-2482

LibTIFF 3.9.4 and earlier does not properly handle an invalid tdstripbytecount field, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted TIFF file, a different vulnerability than CVE-2010-2443...

CVE-2010-2481

The TIFFExtractData macro in LibTIFF before 3.9.4 does not properly handle unknown tag types in TIFF directory entries, which allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted TIFF file...

CVE-2010-2481

The TIFFExtractData macro in LibTIFF before 3.9.4 does not properly handle unknown tag types in TIFF directory entries, which allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted TIFF file...

CVE-2010-2483

CVE-2010-2483 exists in LibTIFF 3.9.0 and is caused by the TIFFRGBAImageGet function when processing a TIFF file with an invalid combination of SamplesPerPixel and Photometric values, allowing a remote attacker to trigger an out-of-bounds read and crash the application (denial of service). Public...

CVE-2010-2481

The CVE refers to LibTIFF, where the TIFFExtractData macro (in LibTIFF versions prior to 3.9.4) mishandles unknown tag types in TIFF directory entries, enabling a remote attacker to trigger an out-of-bounds read and cause an application crash. Concrete mention appears in MiracleLinux AXSA-2010-37...

CVE-2010-2483

The TIFFRGBAImageGet function in LibTIFF 3.9.0 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a TIFF file with an invalid combination of SamplesPerPixel and Photometric values...