Security update for libraw

This update for libraw fixes the following issue: CVE-2026-88387: incorrect numeric conversion in LibRaw::parsetiffifd when processing TIFF tag 0x00fe can lead to undefined behavior and a process crash when a specially crafted file is processed bsc1282783. Patch Instructions: To install this SUSE...

EUVD-2013-5198

Malware in sbrugna...

EUVD-2013-5197

Malware in sbrugna...

SUSE CVE-2016-9297

The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service out-of-bounds read via crafted TIFFSETGETC16ASCII or TIFFSETGETC32ASCII tag values...

tiff: Null source pointer passed as an argument to memcpy in TIFFFetchNormalTag() in tif_dirread.c

A flaw was found in LibTIFF where a NULL source pointer passed as an argument to the memcpy function within the TIFFFetchNormalTag in tifdirread.c. This flaw allows an attacker with a crafted TIFF file to cause a crash that leads to a denial of service...

DEBIAN-CVE-2016-9453

The t2preadwritepdfimagetile function in LibTIFF allows remote attackers to cause a denial of service out-of-bounds write and crash or possibly execute arbitrary code via a JPEG file with a TIFFTAGJPEGTABLES of length one...

UBUNTU-CVE-2016-9453

The t2preadwritepdfimagetile function in LibTIFF allows remote attackers to cause a denial of service out-of-bounds write and crash or possibly execute arbitrary code via a JPEG file with a TIFFTAGJPEGTABLES of length one...

CVE-2017-2952

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable buffer overflow / underflow vulnerability in the image conversion module related to parsing tags in TIFF files. Successful exploitation could lead to arbitrary code execution...

CVE-2016-8331

An exploitable remote code execution vulnerability exists in the handling of TIFF images in LibTIFF version 4.0.6. A crafted TIFF document can lead to a type confusion vulnerability resulting in remote code execution. This vulnerability can be triggered via a TIFF file delivered to the applicatio...

CVE-2013-5357

Integer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute arbitrary code via a long TIFF tag that triggers a heap-based buffer overflow, as demonstrated using a Canon RAW CR2 file with a long TIFF StripByteCounts tag...

CVE-2013-5358

Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to trigger memory corruption via a crafted TIFF tag, as demonstrated using a KDC file with a DSLR-A100 model and certain sequences of tags...

Integer overflow

Integer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute arbitrary code via a long TIFF tag that triggers a heap-based buffer overflow, as demonstrated using a Canon RAW CR2 file with a long TIFF StripByteCounts tag...

PT-2014-2915

Name of the Vulnerable Software and Affected Versions Google Picasa versions prior to 3.9.0 Build 137.69 Description The issue allows remote attackers to trigger memory corruption via a crafted TIFF tag. This can be demonstrated using a KDC file with a DSLR-A100 model and certain sequences of tag...

PT-2014-2914

Name of the Vulnerable Software and Affected Versions Google Picasa versions prior to 3.9.0 Build 137.69 Description The issue is related to an integer overflow in Picasa3.exe, which can be exploited by remote attackers to execute arbitrary code. This is achieved by triggering a heap-based buffer...

CVE-2013-5358

CVE-2013-5358 affects Google Picasa via Picasa3.exe in vulnerable builds prior to 3.9.0 Build 137.69. The issue is memory corruption triggered by parsing crafted TIFF tags in conjunction with a DSLR-A100 model and sequences of tags, potentially enabling remote code execution or other instability....

CVE-2013-5358

Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to trigger memory corruption via a crafted TIFF tag, as demonstrated using a KDC file with a DSLR-A100 model and certain sequences of tags...

CVE-2013-5357

Google Picasa

CVE-2013-5357

Integer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute arbitrary code via a long TIFF tag that triggers a heap-based buffer overflow, as demonstrated using a Canon RAW CR2 file with a long TIFF StripByteCounts tag...

CVE-2013-5358: Improper Restriction of Operations within the Bounds of a Memory Buffer

Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to trigger memory corruption via a crafted TIFF tag, as demonstrated using a KDC file with a DSLR-A100 model and certain sequences of tags...

CVE-2013-5357: Improper Restriction of Operations within the Bounds of a Memory Buffer

Integer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 allows remote attackers to execute arbitrary code via a long TIFF tag that triggers a heap-based buffer overflow, as demonstrated using a Canon RAW CR2 file with a long TIFF StripByteCounts tag...