7869 matches found
CVE-2016-3621
CVE-2016-3621 affects LibTIFF 4.0.6 and earlier, where the LZWEncode function in tif_lzw.c (bmp2tiff tool, using -c lzw) may cause a denial of service via a crafted BMP image (buffer over-read). The connected security notes confirm this vector and link multiple advisories, with upstream fixes rea...
CVE-2016-3623
The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service divide-by-zero by setting the 1 v or 2 h parameter to 0...
CVE-2016-3633
CVE-2016-3633 affects LibTIFF up to version 4.0.6: the setrow function in the thumbnail tool can trigger a denial-of-service via an out-of-bounds read when processing a crafted image. Several connected advisories confirm the issue across libtiff/thumbnail tooling and mandate upgrading to a fixed ...
CVE-2016-3658
CVE-2016-3658 affects LibTIFF 4.0.6 and earlier, where TIFFWriteDirectoryTagLongLong8Array in tif_dirwrite.c (tiffset tool) enables remote out-of-bounds reads, causing denial of service. Mitigation: upgrade LibTIFF to 4.0.7 or newer (see Debian/Arch advisories and upstream fixes).
CVE-2016-3621
The LZWEncode function in tiflzw.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c lzw" option is used, allows remote attackers to cause a denial of service buffer over-read via a crafted BMP image...
CVE-2016-3624
The cvtClump function in the rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds write by setting the "-v" option to -1...
CVE-2016-3633
The setrow function in the thumbnail tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds read via vectors related to the src variable...
CVE-2016-3620
CVE-2016-3620 affects LibTIFF’s bmp2tiff tool: the ZIPEncode function in tif_zip.c (v4.0.6 and earlier) can be triggered by a crafted BMP image to cause a denial of service via a buffer over-read. Multiple connected sources confirm the issue and list the same vulnerable version range. Remediation...
CVE-2016-3621
The LZWEncode function in tiflzw.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c lzw" option is used, allows remote attackers to cause a denial of service buffer over-read via a crafted BMP image...
CVE-2016-3622
The fpAcc function in tifpredict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service divide-by-zero error via a crafted TIFF image...
CVE-2016-3631
The 1 cpStrips and 2 cpTiles functions in the thumbnail tool in LibTIFF 4.0.6 and earlier allow remote attackers to cause a denial of service out-of-bounds read via vectors related to the bytecounts array variable...
CVE-2016-3624
The cvtClump function in the rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds write by setting the "-v" option to -1...
CVE-2016-3631
CVE-2016-3631 affects LibTIFF 4.0.6 and earlier. The vulnerability exists in the thumbnail tool’s cpStrips and cpTiles functions, enabling remote attackers to trigger a denial of service via an out-of-bounds read related to the bytecounts[] array. The connected documents confirm the same CVE appe...
CVE-2016-3623
The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service divide-by-zero by setting the 1 v or 2 h parameter to 0...
CVE-2016-3658
The TIFFWriteDirectoryTagLongLong8Array function in tifdirwrite.c in the tiffset tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds read via vectors involving the ma variable...
CVE-2016-3622
The fpAcc function in tifpredict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service divide-by-zero error via a crafted TIFF image...
CVE-2016-3624
The cvtClump function in the rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds write by setting the "-v" option to -1...
UBUNTU-CVE-2016-3622
The fpAcc function in tifpredict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service divide-by-zero error via a crafted TIFF image...