Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. The vulnerability exists as a heap-based buffer overflow flaw was found in the way libtiff processed certain TIFF files encoded with a 4-bit run-length encoding scheme from ThunderScan. An attacker could use this flaw to create a specially-crafte...

Denial Of Service (DoS)

The libtiff packages is vulnerable to Denial Of Service DoS. An input validation flaw was discovered in libtiff. An attacker could use this flaw to create a specially-crafted TIFF file that, when opened, would cause an application linked against libtiff to crash...

Denial Of Service (DoS)

The libtiff package is vulnerable to Denial Of Service DoS.Due to integer overflow flaws discovered in libtiff, an attacker can create a specially-crafted TIFF file that, when opened, would cause an application linked against libtiff to crash or, possibly, execute arbitrary code...

Denial Of Service (DoS)

libtiff is vulnerable to denial of service DoS. The vulnerability exists as a buffer underwrite flaw was found in libtiff's Lempel-Ziv-Welch LZW compression algorithm decoder. An attacker could create a specially-crafted LZW-encoded TIFF file, which once opened by an unsuspecting user, would caus...

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. The vulnerability exists as several integer overflow flaws, leading to heap-based buffer overflows, were found in various libtiff color space conversion tools. An attacker could create a specially-crafted TIFF file, which once opened by an...

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. The vulnerability exists as multiple uses of uninitialized values were discovered in libtiff's Lempel-Ziv-Welch LZW compression algorithm decoder. An attacker could create a carefully crafted LZW-encoded TIFF file that would cause an application...

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. An attacker could create a malicious TIFF file in such a way that it was possible to cause an application linked with libtiff to crash or possibly execute arbitrary code...

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. The vulnerability exists as an attacker could create a carefully crafted TIFF file in such a way that it was possible to cause an application linked with libtiff to crash or possibly execute arbitrary code...

Denial Of Service (DoS)

The libtiff is vulnerable denial of service DoS. An attacker could create a carefully crafted TIFF file in such a way that it was possible to cause an application linked with libtiff to crash or possibly execute arbitrary code...

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. The vulnerability exists as an attacker could create a carefully crafted TIFF file in such a way that it was possible to cause an application linked with libtiff to crash or possibly execute arbitrary code...

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. An attacker could create a carefully crafted TIFF file in such a way that it was possible to cause an application linked with libtiff to crash or possibly execute arbitrary code...

Heap-based Buffer Overflow

The libtiff is vulnerable to Heap-based buffer overflow. An attacker could create a carefully crafted TIFF file in such a way that it was possible to cause an application linked with libtiff to crash or possibly execute arbitrary code...

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. An attacker could create a carefully crafted TIFF file in such a way that it was possible to cause an application linked with libtiff to crash or possibly execute arbitrary code...

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. The vulnerability exists through a stack-based buffer overflow in the tiffsplit command in libtiff 3.8.2 and earlier might might allow attackers to execute arbitrary code via a long filename. NOTE: tiffsplit is not setuid. If there is not a commo...

Out-of-bounds Read

The libtiff is vulnerable to Out-of-bounds Reads. An attacker could create a carefully crafted TIFF file in such a way that it could cause an application linked with libtiff to crash...

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. The vulnerability exists as an integer overflow flaw was discovered in libtiff. An attacker could create a carefully crafted TIFF file in such a way that it could cause an application linked with libtiff to crash or possibly execute arbitrary cod...

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. A double free flaw was discovered in libtiff. An attacker could create a carefully crafted TIFF file in such a way that it could cause an application linked with libtiff to crash or possibly execute arbitrary code...

Denial Of Service (DoS)

The libtiff package is vulnerable to Denial of Service DoS. An attacker could create a carefully crafted TIFF file in such a way that it could cause an application linked with libtiff to crash...

CVE-2016-9538

tools/tiffcrop.c in libtiff 4.0.6 reads an undefined buffer in readContigStripsIntoBuffer because of a uint16 integer overflow. Reported as MSVR 35100...

CVE-2017-9935

In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2pwritepdf function in tools/tiff2pdf.c. This heap overflow could lead to different damages. For example, a crafted TIFF document can lead to an out-of-bounds read in TIFFCleanup, an invalid free in TIFFClose or t2pfree, memory...