CVE-2010-2596

The OJPEGPostDecode function in tifojpeg.c in LibTIFF 3.9.0 and 3.9.2, as used in tiff2ps, allows remote attackers to cause a denial of service assertion failure and application exit via a crafted TIFF image, related to "downsampled OJPEG input."...

CVE-2010-2598

LibTIFF in Red Hat Enterprise Linux RHEL 3 on x8664 platforms, as used in tiff2rgba, attempts to process image data even when the required compression functionality is not configured, which allows remote attackers to cause a denial of service via a crafted TIFF image, related to "downsampled OJPE...

CVE-2010-2597

The TIFFVStripSize function in tifstrip.c in LibTIFF 3.9.0 and 3.9.2 makes incorrect calls to the TIFFGetField function, which allows remote attackers to cause a denial of service application crash via a crafted TIFF image, related to "downsampled OJPEG input" and possibly related to a compiler...

CVE-2010-2595

The TIFFYCbCrtoRGB function in LibTIFF 3.9.0 and 3.9.2, as used in ImageMagick, does not properly handle invalid ReferenceBlackWhite values, which allows remote attackers to cause a denial of service application crash via a crafted TIFF image that triggers an array index error, related to...

CVE-2010-2233

CVE-2010-2233 affects LibTIFF 3.9.0/3.9.2 (used by ImageMagick) on 64‑bit platforms. The tif_getimage.c vertical-flip handling is incorrect, allowing a crafted TIFF to cause a crash or potentially execute arbitrary code, via the downsampled OJPEG path. Remote exploitation could lead to denial of ...

CVE-2010-2597

The CVE-2010-2597 issue affects LibTIFF 3.9.0 and 3.9.2, where TIFFVStripSize calls TIFFGetField incorrectly, enabling a crafted TIFF image to trigger a denial of service (application crash). The vulnerability is associated with downsampled OJPEG input and may involve a compiler optimization that...

CVE-2010-2598

LibTIFF in Red Hat Enterprise Linux RHEL 3 on x8664 platforms, as used in tiff2rgba, attempts to process image data even when the required compression functionality is not configured, which allows remote attackers to cause a denial of service via a crafted TIFF image, related to "downsampled OJPE...

CVE-2010-2596

The OJPEGPostDecode function in tifojpeg.c in LibTIFF 3.9.0 and 3.9.2, as used in tiff2ps, allows remote attackers to cause a denial of service assertion failure and application exit via a crafted TIFF image, related to "downsampled OJPEG input."...

CVE-2010-2597

The TIFFVStripSize function in tifstrip.c in LibTIFF 3.9.0 and 3.9.2 makes incorrect calls to the TIFFGetField function, which allows remote attackers to cause a denial of service application crash via a crafted TIFF image, related to "downsampled OJPEG input" and possibly related to a compiler...

CVE-2010-2233

tifgetimage.c in LibTIFF 3.9.0 and 3.9.2 on 64-bit platforms, as used in ImageMagick, does not properly perform vertical flips, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted TIFF image, related to "downsampled OJPEG...

CVE-2010-2595

The TIFFYCbCrtoRGB function in LibTIFF 3.9.0 and 3.9.2, as used in ImageMagick, does not properly handle invalid ReferenceBlackWhite values, which allows remote attackers to cause a denial of service application crash via a crafted TIFF image that triggers an array index error, related to...

CVE-2010-2233

tifgetimage.c in LibTIFF 3.9.0 and 3.9.2 on 64-bit platforms, as used in ImageMagick, does not properly perform vertical flips, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted TIFF image, related to "downsampled OJPEG...

CVE-2010-2595

CVE-2010-2595 affects LibTIFF 3.9.0 and 3.9.2 (as used in ImageMagick); processing a TIFF with invalid ReferenceBlackWhite can trigger an array index error in TIFFYCbCrtoRGB, causing denial of service (application crash) via crafted input, related to downsampled OJPEG input. Connected advisories ...

CVE-2010-2598

The CVE-2010-2598 issue affects LibTIFF used by RHEL 3 on x86_64 (via tiff2rgba) where processing TIFF data is attempted even if required compression is not configured, enabling a denial-of-service with a crafted TIFF image (notably related to downsampled OJPEG input). Connected advisories confir...

CVE-2010-2596

CVE-2010-2596 affects LibTIFF: the OJPEGPostDecode function (tif_ojpeg.c) in LibTIFF 3.9.0 and 3.9.2, as used by tiff2ps, allows remote attackers to cause a denial of service via a crafted TIFF image (downsampled OJPEG input). Connected advisories confirm impact and fixes; upstream patches exist ...

Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / 9.0 / 9.1 / current : libtiff (SSA:2010-180-02)

New libtiff packages are available for Slackware 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security...

Fedora 11 : libtiff-3.8.2-15.fc11 (2010-10359)

Fix numerous crashing bugs, including CVE-2010-1411 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

libtiff multiple security vulnerabilities

Multiple memory corruptions on tiff files parsing...

iDefense Security Advisory 06.21.10: Multiple Vendor LibTIFF 3.9.2 Stack Buffer Overflow Vulnerability

iDefense Security Advisory 06.21.10 http://labs.idefense.com/intelligence/vulnerabilities/ Jun 21, 2010 I. BACKGROUND libTIFF is a free and popular image library that provides support for displaying and manipulating Tag Image File Format TIFF image data. This library is used by numerous...

Ubuntu Update for tiff vulnerabilities USN-954-1

Ubuntu Update for Linux kernel vulnerabilities USN-954-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9541.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for tiff vulnerabilities USN-954-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...