CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2016-10266
https://notcve.org/view.php?id=CVE-2016-10266
LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_read.c:351:22. LibTIFF 4.0.7 permite a atacantes remotos provocar una denegación de servicio (error de división por cero y caída de aplicación) a través de una imagen TIFF manipulada, relacionado con libtiff/tif_read.c:351:22. • http://www.debian.org/security/2017/dsa-3844 http://www.securityfocus.com/bid/97115 https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-divide-by-zero https://github.com/vadz/libtiff/commit/438274f938e046d33cb0e1230b41da32ffe223e1 https://usn.ubuntu.com/3602-1 • CWE-369: Divide By Zero •
CVSS: 5.5EPSS: 1%CPEs: 1EXPL: 0CVE-2016-10267
https://notcve.org/view.php?id=CVE-2016-10267
LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_ojpeg.c:816:8. LibTIFF 4.0.7 permite a atacantes remotos provocar una denegación de servicio (error de división por cero y caída de aplicación) a través de una imagen TIFF manipulada, relacionado con libtiff/tif_ojpeg.c: 816: 8. • http://www.debian.org/security/2017/dsa-3844 http://www.securityfocus.com/bid/97117 https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-divide-by-zero https://github.com/vadz/libtiff/commit/43bc256d8ae44b92d2734a3c5bc73957a4d7c1ec https://security.gentoo.org/glsa/201709-27 https://usn.ubuntu.com/3602-1 • CWE-369: Divide By Zero •
CVSS: 7.8EPSS: 1%CPEs: 1EXPL: 0CVE-2016-10268
https://notcve.org/view.php?id=CVE-2016-10268
tools/tiffcp.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (integer underflow and heap-based buffer under-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 78490" and libtiff/tif_unix.c:115:23. tools/tiffcp.c en LibTIFF 4.0.7 permite a los atacantes remotos causar una denegación de servicio (desbordamiento inferior de enteros y lectura inferior de búfer basado en memoria dinámica) o posiblemente tener otro impacto no especificado a través de una imagen TIFF manipulada, relacionado con "READ de tamaño 78490" y libtiff/tif_unix.c:115:23. • http://www.securityfocus.com/bid/97202 https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-heap-based-buffer-overflow https://github.com/vadz/libtiff/commit/5397a417e61258c69209904e652a1f409ec3b9df https://security.gentoo.org/glsa/201709-27 https://usn.ubuntu.com/3602-1 • CWE-191: Integer Underflow (Wrap or Wraparound) •
CVSS: 7.8EPSS: 1%CPEs: 1EXPL: 0CVE-2016-10269
https://notcve.org/view.php?id=CVE-2016-10269
LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6 and 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 512" and libtiff/tif_unix.c:340:2. LibTIFF 4.0.0alfa4, 4.0.0alfa5, 4.0.0alfa6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6 y 4.0. 7 permite a los atacantes remotos causar una denegación de servicio (lectura excesiva del búfer basado en la pila) o posiblemente tener otro impacto no especificado a través de una imagen TIFF elaborada, relacionada con "READ of size 512" y libtiff/tif_unix.c:340:2 • http://www.debian.org/security/2017/dsa-3844 http://www.securityfocus.com/bid/97201 https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-heap-based-buffer-overflow https://github.com/Hack-Me/Pocs_for_Multi_Versions/tree/main/CVE-2016-10269 https://github.com/vadz/libtiff/commit/1044b43637fa7f70fb19b93593777b78bd20da86 https://usn.ubuntu.com/3602-1 • CWE-125: Out-of-bounds Read •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 2CVE-2016-10095
https://notcve.org/view.php?id=CVE-2016-10095
Stack-based buffer overflow in the _TIFFVGetField function in tif_dir.c in LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7 and 4.0.8 allows remote attackers to cause a denial of service (crash) via a crafted TIFF file. Desbordamiento de búfer basado en pila en la función _TIFFVGetField en tif_dir.c en LibTIFF versiones 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7 y 4.0.8 permite a atacantes remotos provocar una denegación de servicio (caída) a través de un archivo TIFF manipulado • http://bugzilla.maptools.org/show_bug.cgi?id=2625 http://www.debian.org/security/2017/dsa-3903 http://www.openwall.com/lists/oss-security/2017/01/01/11 http://www.openwall.com/lists/oss-security/2017/01/01/7 http://www.securityfocus.com/bid/95178 https://blogs.gentoo.org/ago/2017/01/01/libtiff-stack-based-buffer-overflow-in-_tiffvgetfield-tif_dir-c • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •