CVE-2014-9655

CVE-2014-9655 affects LibTIFF: the putcontig8bitYCbCr21tile function in tif_getimage.c or the NeXTDecode function in tif_next.c can be triggered by a crafted TIFF image to cause a denial of service via uninitialized memory access. Connected advisories (Debian, CentOS, Red Hat, Amazon) describe mu...

CVE-2014-9655

The 1 putcontig8bitYCbCr21tile function in tifgetimage.c or 2 NeXTDecode function in tifnext.c in LibTIFF allows remote attackers to cause a denial of service uninitialized memory access via a crafted TIFF image, as demonstrated by libtiff-cvs-1.tif and libtiff-cvs-2.tif...

CVE-2015-8784

LibTIFF's NeXTDecode path (tif_next.c) is vulnerable to an out-of-bounds write via a crafted TIFF image, enabling a remote attacker to trigger a denial of service. The CVE-2015-8784 issue is confirmed across multiple advisories: Debian/Ubuntu have patched libtiff in security updates; Red Hat/Cent...

CVE-2015-8683

The set of connected documents confirms multiple LibTIFF vulnerabilities, notably CVE-2015-8683 (out-of-bounds read in putcontig8bitCIELab) among many others (CVE-2014-8127, CVE-2014-8130, CVE-2015-8665, CVE-2015-8668, etc.). Affected component is LibTIFF (primarily 4.0.x) with various tools (tif...

Silicon Graphics LibTiff tiff2rgba Tool Denial of Service Vulnerability

Silicon Graphics LibTiff is the United States Silicon Graphics, Inc. of a read and write TIFF Tagged Image File Format file library. A denial of service vulnerability exists in the cpStrips and cpTiles functions in the thumbnail.c file in the tiff2rgba tool in Silicon Graphics LibTiff 4.0.6 and...

Silicon Graphics LibTiff Denial of Service Vulnerability (CNVD-2016-02227)

Silicon Graphics LibTiff is the United States Silicon Graphics, Inc. of a read and write TIFF Tagged Image File Format file library. A denial of service vulnerability exists in the tagCompare function in the tifdirinfo.c file in Silicon Graphics LibTiff 4.0.6 and earlier versions. An attacker can...

Silicon Graphics LibTiff Denial of Service Vulnerability (CNVD-2016-02225)

Silicon Graphics LibTiff is the United States Silicon Graphics, Inc. of a read and write TIFF Tagged Image File Format file library. A denial of service vulnerability exists in the TIFFWriteDirectoryTagLongLong8Array function in the tifdirwrite.c file in Silicon Graphics LibTiff 4.0.6 and earlier...

Silicon Graphics LibTiff Denial of Service Vulnerability (CNVD-2016-02226)

Silicon Graphics LibTiff is the United States Silicon Graphics, Inc. of a read and write TIFF Tagged Image File Format file library. A denial of service vulnerability exists in the setrow function in the thumbnail.c file in Silicon Graphics LibTiff 4.0.6 and earlier versions. An attacker can...

Silicon Graphics LibTiff tiff2bw Tool Denial of Service Vulnerability

Silicon Graphics LibTiff is the United States Silicon Graphics, Inc. of a read and write TIFF Tagged Image File Format file library. A denial of service vulnerability exists in the tifread.c file in the Silicon Graphics LibTiff 4.0.6 and earlier versions of the tiff2bw tool. An attacker can explo...

Silicon Graphics LibTiff tiff2rgba tool denial of service vulnerability (CNVD-2016-02229)

Silicon Graphics LibTiff is the United States Silicon Graphics, Inc. of a read and write TIFF Tagged Image File Format file library. A denial of service vulnerability exists in the cvtbystrip function in Silicon Graphics LibTiff 4.0.6 and prior versions of the tiff2rgba tool. An attacker can...

Silicon Graphics LibTiff rgb2ycbcr Tool Denial of Service Vulnerability

Silicon Graphics LibTiff is a library for reading and writing TIFF Tagged Image File Format files from the U.S. company Silicon Graphics. The library contains a number of command-line tools to deal with TIFF files. A denial of service vulnerability exists in the 'cvtClump' function in the rgb2ycb...

Silicon Graphics LibTiff Denial of Service Vulnerability (CNVD-2016-02175)

Silicon Graphics LibTiff is the United States Silicon Graphics, Inc. of a read and write TIFF Tagged Image File Format file library. Silicon Graphics LibTiff 4.0.6 and earlier versions of the TIFFVGetField function in the tifdirinfo.c file has a security vulnerability that can be exploited by an...

Silicon Graphics LibTiff rgb2ycbcr Tool Divide by Zero Error Vulnerability

Silicon Graphics LibTiff is a library for reading and writing TIFF Tagged Image File Format files from the U.S. company Silicon Graphics. The library contains a number of command-line tools to deal with TIFF files. A divide-by-zero error vulnerability exists in the rgb2ycbcr tool in Silicon...

Silicon Graphics LibTiff bmp2tiff tool denial of service vulnerability (CNVD-2016-02092)

Silicon Graphics LibTiff is a library for reading and writing TIFF files. The library contains some command line tools for working with TIFF files. A denial of service vulnerability in the 'ZIPEncode' function in the tifzip.c file in Silicon Graphics LibTiff's bmp2tiff tool allows an attacker to...

Silicon Graphics LibTiff bmp2tiff tool denial of service vulnerability (CNVD-2016-02091)

Silicon Graphics LibTiff is a library for reading and writing TIFF files. The library contains some command line tools for working with TIFF files. A denial of service vulnerability exists in the 'LZWEncode' function in the tiflzw.c file in Silicon Graphics LibTiff's bmp2tiff tool, which allows a...

Silicon Graphics LibTiff bmp2tiff Tool Denial of Service Vulnerability

Silicon Graphics LibTiff is a library for reading and writing TIFF files. The library contains some command line tools for working with TIFF files. A denial of service vulnerability exists in the 'DumpModeEncode' function in Silicon Graphics LibTiff's bmp2tiff tool, which allows an attacker to...

Silicon Graphics LibTiff tiff2rgba Tool Removes Zero Error Vulnerability

Silicon Graphics LibTiff is a library for reading and writing TIFF Tagged Image File Format files from the U.S. company Silicon Graphics. The library contains a number of command-line tools to deal with TIFF files. A divide-by-zero error vulnerability exists in the 'fpAcc' function in the...

Ubuntu: Security Advisory (USN-2939-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2939-1 LibTIFF vulnerabilities | Cloud Foundry

USN-2939-1 LibTIFF vulnerabilities Low Vendor Ubuntu, LibTIFF Versions Affected Ubuntu 14.04 Description LibTIFF could be made to crash or run programs as your login if it opened a specially crafted file. It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or...

Ubuntu 14.04 LTS : LibTIFF vulnerabilities (USN-2939-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2939-1 advisory. It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted...