CVE-2022-2057

Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010...

CVE-2022-2056

Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010...

The vulnerability of the Tiff_Loader.dll library, a tool for 3D JT JT2Go viewing and Teamcenter Visualization lifecycle management system, allows a hacker to trigger a service failure.

The vulnerability of the TiffLoader.dll library, used by 3D JT and JT2Go visualization tools, as well as the Teamcenter Visualization lifecycle management system, stems from a cycle that requires an unavailable exit condition during syntax analysis of TIFF files. Exploiting this vulnerability can...

Autodesk AutoCAD Buffer Error Vulnerability (CNVD-2022-61611)

Autodesk AutoCAD is a professional 3D drawing software from Autodesk, Inc. A security vulnerability exists in Autodesk AutoCAD 2023 and prior versions, which stems from the fact that when parsing TIFF files, an attacker could be forced to read or write beyond the allocated boundaries and could us...

Fedora: Security Advisory for libtiff (FEDORA-2022-e9fe21d102)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: libtiff-4.4.0-1.fc35

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...

CVE-2022-27869

A maliciously crafted TIFF file in Autodesk AutoCAD 2023 can be forced to read and write beyond allocated boundaries when parsing the TIFF file. This vulnerability can be exploited to execute arbitrary code...

Code injection

A maliciously crafted TIFF file in Autodesk AutoCAD 2023 can be forced to read and write beyond allocated boundaries when parsing the TIFF file. This vulnerability can be exploited to execute arbitrary code...

CVE-2022-27869

A maliciously crafted TIFF file in Autodesk AutoCAD 2023 can be forced to read and write beyond allocated boundaries when parsing the TIFF file. This vulnerability can be exploited to execute arbitrary code...

CVE-2022-27869

Autodesk AutoCAD 2023 contains a TIFF parsing vulnerability (CVE-2022-27869) where a malicious TIFF can cause reads/writes beyond allocated boundaries, enabling arbitrary code execution. Affected: AutoCAD 2023 (TIFF processing). Root cause: bounds-related issue in TIFF parsing. Exploitation detai...

Autodesk AutoCAD 缓冲区错误漏洞

Autodesk AutoCAD is a professional 3D drawing software from Autodesk, Inc. A security vulnerability exists in Autodesk AutoCAD 2023 and prior versions, which stems from the fact that when parsing TIFF files, an attacker could be forced to read or write beyond the allocated boundaries and could us...

[SECURITY] Fedora 36 Update: libtiff-4.4.0-1.fc36

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...

Fedora: Security Advisory for libtiff (FEDORA-2022-ea3ebeff3d)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Autodesk 3ds Max 缓冲区错误漏洞

Autodesk 3ds Max is a full-featured, three-dimensional computer graphics software from the US-based Autodesk, Inc. A security vulnerability exists in Autodesk 3ds Max versions 2022 and 2021, which originates from a maliciously crafted TIF file that can be used to write beyond the allocated buffer...

CVE-2021-39820

Adobe InDesign versions 16.3 and earlier, and 16.3.1 and earlier is affected by an Out-of-bounds Write vulnerability due to insecure handling of a malicious TIFF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit thi...

CVE-2021-39820

Adobe InDesign versions 16.3 and earlier, and 16.3.1 and earlier is affected by an Out-of-bounds Write vulnerability due to insecure handling of a malicious TIFF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit thi...

Cross site scripting

Adobe InDesign versions 16.3 and earlier, and 16.3.1 and earlier is affected by an Out-of-bounds Write vulnerability due to insecure handling of a malicious TIFF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit thi...

CVE-2021-39820

CVE-2021-39820 affects Adobe InDesign versions 16.3 (and earlier) and 16.3.1 (and earlier). The vulnerability is an out‑of‑bounds write caused by insecure handling of a malicious TIFF file, which could allow arbitrary code execution in the context of the current user. Exploitation requires user i...

CVE-2021-39820 Adobe InDesign Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution

Adobe InDesign versions 16.3 and earlier, and 16.3.1 and earlier is affected by an Out-of-bounds Write vulnerability due to insecure handling of a malicious TIFF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit thi...

EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2022-1824)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Null source pointer passed as an argument to memcpy function within TIFFFetchNormalTag in tifdirread.c in libtiff versions up to 4.3.0 could lea...