CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2016-10272
https://notcve.org/view.php?id=CVE-2016-10272
LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted TIFF image, related to "WRITE of size 2048" and libtiff/tif_next.c:64:9. LibTIFF 4.0.7 permite a atacantes remotos provocar una denegación de servicio (desbordamiento de búfer basado en memoria dinámica) o posiblemente tener otro impacto no especificado a través de una imagen TIFF manipulada, relacionado con "WRITE de tamaño 2048" y libtiff/tif_next.c:64:9. • http://www.securityfocus.com/bid/97197 https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-heap-based-buffer-overflow https://github.com/vadz/libtiff/commit/9657bbe3cdce4aaa90e07d50c1c70ae52da0ba6a • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2016-10271
https://notcve.org/view.php?id=CVE-2016-10271
tools/tiffcrop.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read and buffer overflow) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 1" and libtiff/tif_fax3.c:413:13. tools/tiffcrop.c en LibTIFF 4.0.7 permite a atacantes remotos provocar una denegación de servicio (sobre lectura de búfer basada en memoria dinámica y desbordamiento de búfer) o posiblemente tener otro impacto no especificado a través de una imagen TIFF manipulada, relacionado con "READ de tamaño 1" y libtiff/tif_fax3.c:413:13. • http://www.securityfocus.com/bid/97199 https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-heap-based-buffer-overflow https://github.com/vadz/libtiff/commit/9657bbe3cdce4aaa90e07d50c1c70ae52da0ba6a • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2016-10270
https://notcve.org/view.php?id=CVE-2016-10270
LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 8" and libtiff/tif_read.c:523:22. LibTIFF 4.0.7 permite a atacantes remotos provocar una denegación de servicio (sobre lectura de búfer basada en memoria dinámica) o posiblemente tener otro impacto no especificado a través de una imagen TIFF manipulada, relacionado con "READ de tamaño 8" y libtiff/tif_read.c:523:22. • http://www.debian.org/security/2017/dsa-3844 http://www.securityfocus.com/bid/97200 https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-heap-based-buffer-overflow https://github.com/vadz/libtiff/commit/9a72a69e035ee70ff5c41541c8c61cd97990d018 • CWE-125: Out-of-bounds Read •
CVSS: 7.8EPSS: 1%CPEs: 1EXPL: 0CVE-2016-10269
https://notcve.org/view.php?id=CVE-2016-10269
LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6 and 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 512" and libtiff/tif_unix.c:340:2. LibTIFF 4.0.0alfa4, 4.0.0alfa5, 4.0.0alfa6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6 y 4.0. 7 permite a los atacantes remotos causar una denegación de servicio (lectura excesiva del búfer basado en la pila) o posiblemente tener otro impacto no especificado a través de una imagen TIFF elaborada, relacionada con "READ of size 512" y libtiff/tif_unix.c:340:2 • http://www.debian.org/security/2017/dsa-3844 http://www.securityfocus.com/bid/97201 https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-heap-based-buffer-overflow https://github.com/Hack-Me/Pocs_for_Multi_Versions/tree/main/CVE-2016-10269 https://github.com/vadz/libtiff/commit/1044b43637fa7f70fb19b93593777b78bd20da86 https://usn.ubuntu.com/3602-1 • CWE-125: Out-of-bounds Read •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2016-10266
https://notcve.org/view.php?id=CVE-2016-10266
LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_read.c:351:22. LibTIFF 4.0.7 permite a atacantes remotos provocar una denegación de servicio (error de división por cero y caída de aplicación) a través de una imagen TIFF manipulada, relacionado con libtiff/tif_read.c:351:22. • http://www.debian.org/security/2017/dsa-3844 http://www.securityfocus.com/bid/97115 https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-divide-by-zero https://github.com/vadz/libtiff/commit/438274f938e046d33cb0e1230b41da32ffe223e1 https://usn.ubuntu.com/3602-1 • CWE-369: Divide By Zero •