7871 matches found
CVE-2016-3619
CVE-2016-3619 affects LibTIFF: the DumpModeEncode path in bmp2tiff (tif_dumpmode.c) of LibTIFF 4.0.6 and earlier allows a remote user to trigger a denial of service via a crafted BMP image (buffer over-read). Public docs confirm a fixed version in LibTIFF 4.0.7, with Apple updating LibTIFF in AKC...
CVE-2016-3623
CVE-2016-3623 affects LibTIFF (rgb2ycbcr tool) on versions 4.0.6 and earlier. A crafted image can trigger a division-by-zero through setting the v or h parameter to 0, causing a denial of service. Public advisories and Debian/Arch records indicate upstream fixes in LibTIFF 4.0.7 and later; remedi...
CVE-2016-3624
CVE-2016-3624 is a LibTIFF vulnerability affecting the rgb2ycbcr tool. The cvtClump function in LibTIFF 4.0.6 and earlier can trigger a denial of service via an out-of-bounds write when the -v option is set to -1. Affects LibTIFF 4.0.6 and earlier across multiple distributions (Debian, Gentoo, Ar...
CVE-2016-3625
CVE-2016-3625 affects LibTIFF up to version 4.0.6, specifically the tif_read.c code path used by the tiff2bw tool. A crafted TIFF image can trigger an out-of-bounds read, resulting in a denial of service. Public reports in multiple advisories list this vulnerability among LibTIFF flaws and indica...
CVE-2016-3658
The TIFFWriteDirectoryTagLongLong8Array function in tifdirwrite.c in the tiffset tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds read via vectors involving the ma variable...
CVE-2016-3634
The tagCompare function in tifdirinfo.c in the thumbnail tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds read via vectors related to fieldtag matching...
CVE-2016-3625
tifread.c in the tiff2bw tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds read via a crafted TIFF image...
CVE-2016-3620
The ZIPEncode function in tifzip.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c zip" option is used, allows remote attackers to cause a denial of service buffer over-read via a crafted BMP image...
CVE-2016-3631
The 1 cpStrips and 2 cpTiles functions in the thumbnail tool in LibTIFF 4.0.6 and earlier allow remote attackers to cause a denial of service out-of-bounds read via vectors related to the bytecounts array variable...
CVE-2016-3622
CVE-2016-3622 affects LibTIFF 4.0.6 and earlier, specifically the fpAcc function in tif_predict.c used by tiff2rgba, which can cause a denial of service via a crafted TIFF image due to division by zero. The impact is a DoS; no other outcomes are stated in the provided documents. Remediation guida...
CVE-2016-3621
The LZWEncode function in tiflzw.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c lzw" option is used, allows remote attackers to cause a denial of service buffer over-read via a crafted BMP image...
CVE-2016-3622
The fpAcc function in tifpredict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service divide-by-zero error via a crafted TIFF image...
CVE-2016-3624
The cvtClump function in the rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds write by setting the "-v" option to -1...
CVE-2016-3658
The TIFFWriteDirectoryTagLongLong8Array function in tifdirwrite.c in the tiffset tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds read via vectors involving the ma variable...
CVE-2016-3619
The DumpModeEncode function in tifdumpmode.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c none" option is used, allows remote attackers to cause a denial of service buffer over-read via a crafted BMP image...
CVE-2016-3633
CVE-2016-3633 affects LibTIFF up to version 4.0.6: the setrow function in the thumbnail tool can trigger a denial-of-service via an out-of-bounds read when processing a crafted image. Several connected advisories confirm the issue across libtiff/thumbnail tooling and mandate upgrading to a fixed ...
CVE-2016-3619
The DumpModeEncode function in tifdumpmode.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c none" option is used, allows remote attackers to cause a denial of service buffer over-read via a crafted BMP image...
CVE-2016-3634
The tagCompare function in tifdirinfo.c in the thumbnail tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds read via vectors related to fieldtag matching...