EUVD-2019-4829

Malware in sbrugna...

OESA-2025-2050 libtiff security update

This provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff...

CVE-2019-13324

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.909. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

SUSE CVE-2018-7728

An issue was discovered in Exempi through 2.4.4. XMPFiles/source/FileHandlers/TIFFHandler.cpp mishandles a case of a zero length, leading to a heap-based buffer over-read in the MD5Update function in third-party/zuid/interfaces/MD5.cpp...

OPENSUSE-SU-2022:0816-1 Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: - CVE-2022-21248: Fixed incomplete deserialization class filtering in ObjectInputStream. bnc1194926 - CVE-2022-21277: Fixed incorrect reading of TIFF files in TIFFNullDecompressor. bnc1194930 - CVE-2022-21282: Fixed Insufficient URI chec...

SUSE-SU-2022:0816-1 Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: - CVE-2022-21248: Fixed incomplete deserialization class filtering in ObjectInputStream. bnc1194926 - CVE-2022-21277: Fixed incorrect reading of TIFF files in TIFFNullDecompressor. bnc1194930 - CVE-2022-21282: Fixed Insufficient URI chec...

SUSE-SU-2022:0730-1 Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: - CVE-2022-21248: Fixed incomplete deserialization class filtering in ObjectInputStream. bnc1194926 - CVE-2022-21277: Fixed incorrect reading of TIFF files in TIFFNullDecompressor. bnc1194930 - CVE-2022-21282: Fixed Insufficient URI chec...

PT-2020-18906 · Accusoft · Accusoft Imagegear

Name of the Vulnerable Software and Affected Versions: Accusoft ImageGear version 19.5.0 Description: A specially crafted TIFF file can cause an out-of-bounds write in the igcore19d.dll TIFF tifread parser, resulting in remote code execution. An attacker needs to provide a malformed file to the...

ImageMagick < 6.5.2-9 magick/xwindow.c XMakeImage() Function TIFF File Handling Overflow

The remote Windows host is running a version of ImageMagick earlier than 6.5.2-9. Such versions reportedly fail to properly handle malformed 'TIFF' files in the 'XMakeImage' function. If an attacker can trick a user on the remote host into opening a specially crafted file using the affected...

Important: Red Hat Security Advisory: libtiff security update

Updated libtiff packages that fix various integer overflows are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team The libtiff package contains a library of functions for manipulating TIFF Tagged Image...