CVE-2016-10092

LibTIFF CVE-2016-10092 is a heap-based buffer overflow vulnerability in readContigStripsIntoBuffer (tif_unix.c) reported in LibTIFF 4.0.7 and multiple 3.9.x/4.0.x/alpha/beta releases. The issue allows remote attackers to craft an image that may trigger out-of-bounds writes in affected versions, w...

CVE-2016-10094

CVE-2016-10094 is an off-by-one vulnerability in LibTIFF 4.0.7’s t2p_readwrite_pdf_image_tile in tools/tiff2pdf.c, allowing a crafted TIFF image to cause an unspecified impact (buffer overrun). Public advisories (IBM, openSUSE, Red Hat, etc.) reference this as a LibTIFF heap/buffer overflow famil...

CVE-2016-10095

Stack-based buffer overflow in the TIFFVGetField function in tifdir.c in LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7 and 4.0.8 allows remote attackers to cause a denial of service crash via a crafted TIFF file...

CVE-2016-10095

Stack-based buffer overflow in the TIFFVGetField function in tifdir.c in LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7 and 4.0.8 allows remote attackers to cause a denial of service crash via a crafted TIFF file...

CVE-2016-10093

LibTIFF CVE-2016-10093 is a heap-based buffer overflow in tools/tiffcp.c caused by an integer overflow when handling crafted TIFF images. Affected LibTIFF versions include 4.0.x and earlier (e.g., 4.0.6 and prior). The vulnerability has been associated with remote-exploit scenarios via crafted im...

CVE-2016-10093

Integer overflow in tools/tiffcp.c in LibTIFF 4.0.7, 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5 and 4.0.6 allows remote attackers to have unspecified impact via a crafted image, which triggers a...

Ubuntu 14.04 LTS / 16.04 LTS : LibTIFF vulnerabilities (USN-3212-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3212-1 advisory. It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a...

USN-3212-1 tiff vulnerabilities

It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges...

USN-3212-1: LibTIFF vulnerabilities

It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges...

The vulnerability of the OpenSUSE operating system, which allows a hacker to trigger a service failure.

The vulnerability of the DumpModeDecode function in the libtiff library of the openSUSE operating system arises from the execution of an operation outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause a service failure by using a specially crafted tiff imag...

The vulnerability of the LibTIFF library, which allows a hacker to gain unauthorized access to a device

The vulnerability of the TIFFVGetField function in the LibTIFF library arises due to buffer overflow on the stack. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the device through a specially crafted file...

The vulnerability of the LibTIFF library, which allows a hacker to cause an unexpected termination of the application

The vulnerability of the tifpackbits.c function in the LibTIFF library arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause an unexpected termination of the application by using a specially created BMP...

Silicon Graphics LibTIFF Buffer Overflow Vulnerability (CNVD-2017-01408)

Silicon Graphics LibTIFF is a library for reading and writing TIFF Tagged Image File Format files from Silicon Graphics, USA. The library contains a number of command-line tools for processing TIFF files. A buffer overflow vulnerability exists in the readgifimage function of the gif2tiff.c file o...

FreeBSD : tiff -- multiple vulnerabilities (fb74eacc-ec8a-11e6-bc8a-0011d823eebd)

libtiff project reports : Multiple flaws have been discovered in libtiff library and utilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine and...

Buffer overflow

Buffer overflow in the readgifimage function in gif2tiff.c in the gif2tiff tool in LibTIFF 4.0.6 allows remote attackers to cause a denial of service segmentation fault via a crafted gif file...

DEBIAN-CVE-2016-5102

Buffer overflow in the readgifimage function in gif2tiff.c in the gif2tiff tool in LibTIFF 4.0.6 allows remote attackers to cause a denial of service segmentation fault via a crafted gif file...

CVE-2016-9532

Integer overflow in the writeBufferToSeparateStrips function in tiffcrop.c in LibTIFF before 4.0.7 allows remote attackers to cause a denial of service out-of-bounds read via a crafted tif file...

CVE-2016-5102

Buffer overflow in the readgifimage function in gif2tiff.c in the gif2tiff tool in LibTIFF 4.0.6 allows remote attackers to cause a denial of service segmentation fault via a crafted gif file...

CVE-2016-5102

Buffer overflow in the readgifimage function in gif2tiff.c in the gif2tiff tool in LibTIFF 4.0.6 allows remote attackers to cause a denial of service segmentation fault via a crafted gif file...

CVE-2016-9532

Integer overflow in the writeBufferToSeparateStrips function in tiffcrop.c in LibTIFF before 4.0.7 allows remote attackers to cause a denial of service out-of-bounds read via a crafted tif file...