5 matches found
CVE-2025-55891
CVE-2025-55891:TIFFCP.EXE(docuPrinter Pro)因畸形TIFF文件导致的堆损坏漏洞 摘要 TIFFCP.EXE(与Neevia docuPrinter Pro捆绑的命令行工具)中存在堆损坏漏洞,原因是使用了过时且存在漏洞的libtiff版本(v3.5.7)。攻击者通过提供特制的TIFF文件,可在LZW解压缩期间触发段错误。 该问题已在Linux(通过libtiff 3.5.7编译的开源tiffcp)和Windows(使用docuPrinter...
ImageMagick 缓冲区错误漏洞
ImageMagick is a set of open-source image processing software from the American company ImageMagick. The software can read, convert or write images in multiple formats. A security vulnerability exists in ImageMagick that stems from a heap buffer overflow issue. When the application processes an...
Internet Bug Bounty: Heap buffer overflow vulnerability while processing a malformed TIFF file.
A heap buffer overflow vulnerability occurs in magick while processing of a malformed TIFF file.Following is the version/build details: $ magick -version Version: ImageMagick 7.0.10-45 Q16 x8664 2020-11-30 https://imagemagick.org Copyright: © 1999-2020 ImageMagick Studio LLC License:...