Lucene search
+L

7914 matches found

Veracode
Veracode
added 2020/04/10 12:36 a.m.32 views

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. The vulnerability exists as several integer overflow flaws, leading to heap-based buffer overflows, were found in various libtiff color space conversion tools. An attacker could create a specially-crafted TIFF file, which once opened by an...

9.3CVSS6.3AI score0.04152EPSS
SaveExploits1References31Affected Software1
Veracode
Veracode
added 2020/04/10 12:34 a.m.33 views

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. The vulnerability exists as multiple uses of uninitialized values were discovered in libtiff's Lempel-Ziv-Welch LZW compression algorithm decoder. An attacker could create a carefully crafted LZW-encoded TIFF file that would cause an application...

6.8CVSS4.2AI score0.0413EPSS
SaveExploits1References49Affected Software1
Veracode
Veracode
added 2020/04/10 12:11 a.m.29 views

Denial Of Service (DoS)

The libtiff is vulnerable denial of service DoS. An attacker could create a carefully crafted TIFF file in such a way that it was possible to cause an application linked with libtiff to crash or possibly execute arbitrary code...

7.8CVSS4.7AI score0.0273EPSS
SaveExploits1References43Affected Software1
Veracode
Veracode
added 2020/04/10 12:11 a.m.33 views

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. An attacker could create a malicious TIFF file in such a way that it was possible to cause an application linked with libtiff to crash or possibly execute arbitrary code...

7.5CVSS4.3AI score0.05665EPSS
SaveExploits1References47Affected Software1
Veracode
Veracode
added 2020/04/10 12:11 a.m.24 views

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. The vulnerability exists as an attacker could create a carefully crafted TIFF file in such a way that it was possible to cause an application linked with libtiff to crash or possibly execute arbitrary code...

7.5CVSS4.2AI score0.03466EPSS
SaveExploits1References40Affected Software1
Veracode
Veracode
added 2020/04/10 12:11 a.m.31 views

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. An attacker could create a carefully crafted TIFF file in such a way that it was possible to cause an application linked with libtiff to crash or possibly execute arbitrary code...

7.5CVSS4.1AI score0.05218EPSS
SaveExploits1References51Affected Software1
Veracode
Veracode
added 2020/04/10 12:11 a.m.30 views

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. The vulnerability exists as an attacker could create a carefully crafted TIFF file in such a way that it was possible to cause an application linked with libtiff to crash or possibly execute arbitrary code...

7.5CVSS4.2AI score0.05218EPSS
SaveExploits1References49Affected Software1
Veracode
Veracode
added 2020/04/10 12:11 a.m.27 views

Heap-based Buffer Overflow

The libtiff is vulnerable to Heap-based buffer overflow. An attacker could create a carefully crafted TIFF file in such a way that it was possible to cause an application linked with libtiff to crash or possibly execute arbitrary code...

7.5CVSS4.7AI score0.04338EPSS
SaveExploits1References45Affected Software1
Veracode
Veracode
added 2020/04/10 12:11 a.m.24 views

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. An attacker could create a carefully crafted TIFF file in such a way that it was possible to cause an application linked with libtiff to crash or possibly execute arbitrary code...

7.5CVSS4.1AI score0.53046EPSS
SaveExploits14References51Affected Software1
Veracode
Veracode
added 2020/04/10 12:11 a.m.29 views

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. The vulnerability exists through a stack-based buffer overflow in the tiffsplit command in libtiff 3.8.2 and earlier might might allow attackers to execute arbitrary code via a long filename. NOTE: tiffsplit is not setuid. If there is not a commo...

7.5CVSS4.9AI score0.14415EPSS
SaveExploits1References13Affected Software1
Veracode
Veracode
added 2020/04/10 12:10 a.m.25 views

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. A double free flaw was discovered in libtiff. An attacker could create a carefully crafted TIFF file in such a way that it could cause an application linked with libtiff to crash or possibly execute arbitrary code...

6.5CVSS3.5AI score0.09742EPSS
SaveExploits2References30Affected Software1
Veracode
Veracode
added 2020/04/10 12:10 a.m.25 views

Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. The vulnerability exists as an integer overflow flaw was discovered in libtiff. An attacker could create a carefully crafted TIFF file in such a way that it could cause an application linked with libtiff to crash or possibly execute arbitrary cod...

6.5CVSS4.3AI score0.10524EPSS
SaveExploits2References30Affected Software1
Veracode
Veracode
added 2020/04/10 12:10 a.m.20 views

Out-of-bounds Read

The libtiff is vulnerable to Out-of-bounds Reads. An attacker could create a carefully crafted TIFF file in such a way that it could cause an application linked with libtiff to crash...

2.1CVSS3.3AI score0.00799EPSS
SaveExploits0References21Affected Software1
Veracode
Veracode
added 2020/04/10 12:10 a.m.23 views

Denial Of Service (DoS)

The libtiff package is vulnerable to Denial of Service DoS. An attacker could create a carefully crafted TIFF file in such a way that it could cause an application linked with libtiff to crash...

4CVSS3.4AI score0.0865EPSS
SaveExploits2References31Affected Software1
RedhatCVE
RedhatCVE
added 2020/04/08 5:24 p.m.34 views

CVE-2016-9538

tools/tiffcrop.c in libtiff 4.0.6 reads an undefined buffer in readContigStripsIntoBuffer because of a uint16 integer overflow. Reported as MSVR 35100...

9.8CVSS3.9AI score0.02791EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2020/04/08 4:49 p.m.34 views

CVE-2017-9935

In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2pwritepdf function in tools/tiff2pdf.c. This heap overflow could lead to different damages. For example, a crafted TIFF document can lead to an out-of-bounds read in TIFFCleanup, an invalid free in TIFFClose or t2pfree, memory...

8.8CVSS3AI score0.03731EPSS
SaveExploits1References1
Photon
Photon
added 2020/04/08 12:00 a.m.65 views

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0227

An update of 'libtiff', 'python2', 'bubblewrap', 'postgresql', 'yarn', 'libgcrypt', 'haproxy' packages of Photon OS has been released...

8.5CVSS0.9AI score0.60727EPSS
SaveExploits2
Photon
Photon
added 2020/04/08 12:00 a.m.41 views

Important Photon OS Security Update - PHSA-2020-0227

Updates of 'haproxy', 'yarn', 'libgcrypt', 'python2', 'libtiff', 'postgresql', 'bubblewrap' packages of Photon OS have been released...

8.8CVSS7.9AI score0.60727EPSS
SaveExploits1
Photon
Photon
added 2020/04/08 12:00 a.m.57 views

Important Photon OS Security Update - PHSA-2020-0078

Updates of 'bubblewrap', 'python3', 'python2', 'haproxy', 'yarn', 'ansible', 'libtiff', 'libvirt' packages of Photon OS have been released...

8.5CVSS1.7AI score0.60727EPSS
SaveExploits4
Photon
Photon
added 2020/04/08 12:00 a.m.40 views

Important Photon OS Security Update - PHSA-2020-3.0-0078

Updates of 'libtiff', 'haproxy', 'yarn', 'libvirt', 'ansible', 'python3', 'bubblewrap', 'python2' packages of Photon OS have been released...

8.8CVSS6.6AI score0.60727EPSS
SaveExploits1
Rows per page
Query Builder