Page 10 of 118 results (0.012 seconds)

CVSS: 9.8EPSS: 15%CPEs: 47EXPL: 4

CVE-2009-5022 – IrfanView - '.TIF' Image Decompression Buffer Overflow

https://notcve.org/view.php?id=CVE-2009-5022

03 May 2011 — Heap-based buffer overflow in tif_ojpeg.c in the OJPEG decoder in LibTIFF before 3.9.5 allows remote attackers to execute arbitrary code via a crafted TIFF file. Desbordamiento de búfer basado en memoria dinámica en tif_ojpeg.c en el decodificador OJPEG en LibTIFF anterior a v3.9.5 permite a atacantes remotos ejecutar código arbitrario mediante un fichero TIFF manipulado. • https://www.exploit-db.com/exploits/22681 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.8EPSS: 4%CPEs: 47EXPL: 0

CVE-2010-4665 – libtiff tiffdump integer overflow

https://notcve.org/view.php?id=CVE-2010-4665

03 May 2011 — Integer overflow in the ReadDirectory function in tiffdump.c in tiffdump in LibTIFF before 3.9.5 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TIFF file containing a directory data structure with many directory entries. Desbordamiento de enteros en la función ReadDirectory en tiffdump.c en tiffdump en LibTIFF antes de v3.9.5 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) o posiblemente t... • http://bugzilla.maptools.org/show_bug.cgi?id=2218 • CWE-189: Numeric Errors CWE-190: Integer Overflow or Wraparound •

CVSS: 9.8EPSS: 33%CPEs: 47EXPL: 0

CVE-2011-1167 – Libtiff ThunderCode Decoder THUNDER_2BITDELTAS Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2011-1167

21 Mar 2011 — Heap-based buffer overflow in the thunder (aka ThunderScan) decoder in tif_thunder.c in LibTIFF 3.9.4 and earlier allows remote attackers to execute arbitrary code via crafted THUNDER_2BITDELTAS data in a .tiff file that has an unexpected BitsPerSample value. Desbordamiento de búfer basado en memoria dinámica en el decodificador Thunder (tambien conocido por ThunderScan) en tif_thunder.c de LibTIFF v3.9.4 y anteriores ,permite a atacantes remotos causar una denegación de servicio (cuelgue) o ejecutar código... • http://blackberry.com/btsc/KB27244 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-122: Heap-based Buffer Overflow •

CVSS: 5.5EPSS: 20%CPEs: 45EXPL: 2

CVE-2010-2482 – LibTIFF - 'td_stripbytecount' Null Pointer Dereference Remote Denial of Service

https://notcve.org/view.php?id=CVE-2010-2482

06 Jul 2010 — LibTIFF 3.9.4 and earlier does not properly handle an invalid td_stripbytecount field, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted TIFF file, a different vulnerability than CVE-2010-2443. LibTIFF v3.9.4 y anteriores no manejan adecuadamente el campo invalid td_stripbytecount, lo que pemite a atacantes remotos causar una denegación de servicio (desreferencia de puntero nulo y caída de programa) a través de un fichero TIFF manipulad... • https://www.exploit-db.com/exploits/14573 •

CVSS: 5.5EPSS: 1%CPEs: 45EXPL: 1

CVE-2010-2481 – libtiff: TIFFExtractData out-of-bounds read crash

https://notcve.org/view.php?id=CVE-2010-2481

06 Jul 2010 — The TIFFExtractData macro in LibTIFF before 3.9.4 does not properly handle unknown tag types in TIFF directory entries, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted TIFF file. La macro TIFFExtractData en LibTIFF anteior v3.9.4 no maneja adecuadamente tipos de etiquetas desconocidas en entradas de directorios TIFF, lo que permite a atacantes remotos causar una denegación de servicio (lectura fuera de rango y caída de programa) a través de... • http://bugzilla.maptools.org/show_bug.cgi?id=2210 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-125: Out-of-bounds Read •

CVSS: 6.5EPSS: 6%CPEs: 44EXPL: 0

CVE-2010-2443

https://notcve.org/view.php?id=CVE-2010-2443

24 Jun 2010 — The OJPEGReadBufferFill function in tif_ojpeg.c in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an OJPEG image with undefined strip offsets, related to the TIFFVGetField function. La función OJPEGReadBufferFill en el archivo tif_ojpeg.c en LibTIFF anterior a versión 3.9.3, permite a los atacantes remotos causar una denegación de servicio (desreferencia de un puntero NULL y bloqueo de aplicación) por medio de una imagen OJPEG c... • http://blogs.sun.com/security/entry/cve_2010_2065_cve_2010 •

CVSS: 9.8EPSS: 5%CPEs: 44EXPL: 0

CVE-2010-2065

https://notcve.org/view.php?id=CVE-2010-2065

23 Jun 2010 — Integer overflow in the TIFFroundup macro in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TIFF file that triggers a buffer overflow. Desbordamiento de enteros en la marco TIFFroundup macro en LibTIFF anterior v3.9.3 permite a atacantes remotos causar una denegación de servicio (caída aplicación) o probablemente ejecutar código de su elección a través de un fichero TIFF manipulado que provoca un desbordamiento d... • http://blogs.sun.com/security/entry/cve_2010_2065_cve_2010 • CWE-189: Numeric Errors •

CVSS: 9.8EPSS: 3%CPEs: 6EXPL: 0

CVE-2010-2067

https://notcve.org/view.php?id=CVE-2010-2067

23 Jun 2010 — Stack-based buffer overflow in the TIFFFetchSubjectDistance function in tif_dirread.c in LibTIFF before 3.9.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long EXIF SubjectDistance field in a TIFF file. Desbordamiento de búfer basado en pila en la función TIFFFetchSubjectDistance en tif_dirread.c en LibTIFF anterior v3.9.4 permite a atacantes remotos causar una denegación de servicio (caída aplicación)o probablemente ejecutar código de su ... • http://bugzilla.maptools.org/show_bug.cgi?id=2212 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 9.8EPSS: 1%CPEs: 15EXPL: 0

CVE-2008-2327 – libtiff: use of uninitialized memory in LZW decoder

https://notcve.org/view.php?id=CVE-2008-2327

27 Aug 2008 — Multiple buffer underflows in the (1) LZWDecode, (2) LZWDecodeCompat, and (3) LZWDecodeVector functions in tif_lzw.c in the LZW decoder in LibTIFF 3.8.2 and earlier allow context-dependent attackers to execute arbitrary code via a crafted TIFF file, related to improper handling of the CODE_CLEAR code. Múltiples desbordamientos de búfer en las funciones (1) LZWDecode, (2) LZWDecodeCompat y (3) LZWDecodeVector en el archivo tif_lzw.c en el decodificador LZW en LibTIFF versión 3.8.2 y anteriores, permite a los... • http://bugs.gentoo.org/show_bug.cgi?id=234080 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 9.8EPSS: 37%CPEs: 39EXPL: 6

CVE-2006-3459 – Apple iPhone MobileSafari LibTIFF - 'browser' Remote Buffer Overflow

https://notcve.org/view.php?id=CVE-2006-3459

03 Aug 2006 — Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow context-dependent attackers to execute arbitrary code or cause a denial of service via unspecified vectors, including a large tdir_count value in the TIFFFetchShortPair function in tif_dirread.c. Múltiples desbordamientos de búfer basados en pila en la librería TIFF (libtiff)anterior a 3.8.2 permiten a atacantes locales o remotos (dependiendo del contexto) provocar una de... • https://www.exploit-db.com/exploits/16862 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •