
CVE-2016-5102 – Gentoo Linux Security Advisory 201701-16
https://notcve.org/view.php?id=CVE-2016-5102
09 Jan 2017 — Buffer overflow in the readgifimage function in gif2tiff.c in the gif2tiff tool in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (segmentation fault) via a crafted gif file. Desbordamiento de búfer en la función readgifimage de gif2tiff.c en la herramienta gif2tiff en LibTIFF 4.0.6 permite a atacantes remotos provocar una denegación de servicio (fallo de segmentación) a través de un archivo gif manipulado It was discovered that LibTIFF incorrectly handled certain malformed images. If a ... • http://bugzilla.maptools.org/show_bug.cgi?id=2552 • CWE-20: Improper Input Validation •

CVE-2016-9453 – Gentoo Linux Security Advisory 201701-16
https://notcve.org/view.php?id=CVE-2016-9453
09 Jan 2017 — The t2p_readwrite_pdf_image_tile function in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a JPEG file with a TIFFTAG_JPEGTABLES of length one. La función t2p_readwrite_pdf_image_tile en LibTIFF permite a atacantes remotos provocar una denegación de servicio (escritura fuera de limites y caída) o posiblemente ejecutar código arbitrario a través de un archivo JPEG manipulado con TIFFTAG_JPEGTABLES de longitud uno. It was di... • http://bugzilla.maptools.org/show_bug.cgi?id=2579 • CWE-787: Out-of-bounds Write •

CVE-2016-9532 – Gentoo Linux Security Advisory 201701-16
https://notcve.org/view.php?id=CVE-2016-9532
09 Jan 2017 — Integer overflow in the writeBufferToSeparateStrips function in tiffcrop.c in LibTIFF before 4.0.7 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tif file. Desbordamiento de enteros en la función writeBufferToSeparateStrips en tiffcrop.c en LibTIFF en versiones anteriores a 4.0.7 permite a atacantes remotos provocar una denegación de servicio (lectura fuera de límites) a través de un archivo tif manipulado. It was discovered that LibTIFF incorrectly handled certain m... • http://bugzilla.maptools.org/show_bug.cgi?id=2592 • CWE-125: Out-of-bounds Read •

CVE-2016-5314 – Gentoo Linux Security Advisory 201701-16
https://notcve.org/view.php?id=CVE-2016-5314
09 Jan 2017 — Buffer overflow in the PixarLogDecode function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by overwriting the vgetparent function pointer with rgb2ycbcr. Desbordamiento de búfer en la función PixarLogDecode en tif_pixarlog.c en LibTIFF, en versiones 4.0.6 y anteriores, permite que atacantes remotos provoquen una denegación de servicio (cierre inesper... • http://bugzilla.maptools.org/show_bug.cgi?id=2554 • CWE-787: Out-of-bounds Write •

CVE-2016-5315 – Gentoo Linux Security Advisory 201701-16
https://notcve.org/view.php?id=CVE-2016-5315
09 Jan 2017 — The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tiff image. La función setByteArray en tif_dir.c en libtiff 4.0.6 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (lectura fuera de límites) a través de una imagen tiff manipulada. It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a s... • http://www.debian.org/security/2017/dsa-3762 • CWE-125: Out-of-bounds Read •

CVE-2016-5316 – Gentoo Linux Security Advisory 201701-16
https://notcve.org/view.php?id=CVE-2016-5316
09 Jan 2017 — Out-of-bounds read in the PixarLogCleanup function in tif_pixarlog.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application by sending a crafted TIFF image to the rgb2ycbcr tool. Lectura fuera de límites en la función PixarLogCleanup en tif_pixarlog.c en libtiff 4.0.6 y versiones anteriores permite a atacantes remotos bloquear la aplicación enviando una imagen TIFF manipulada a la herramienta rgb2ycbcr. It was discovered that LibTIFF incorrectly handled certain malformed images. If a ... • http://lists.opensuse.org/opensuse-updates/2016-07/msg00087.html • CWE-125: Out-of-bounds Read •

CVE-2016-5318 – Gentoo Linux Security Advisory 201701-16
https://notcve.org/view.php?id=CVE-2016-5318
09 Jan 2017 — Stack-based buffer overflow in the _TIFFVGetField function in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted tiff. Desbordamiento de búfer basado en pila en la función _TIFFVGetField en libtiff 4.0.6 y versiones anteriores permite a atacantes remotos bloquear la aplicación a través de un tiff manipulado. It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image, a re... • http://www.openwall.com/lists/oss-security/2016/04/27/6 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVE-2016-5319 – Gentoo Linux Security Advisory 201701-16
https://notcve.org/view.php?id=CVE-2016-5319
09 Jan 2017 — Heap-based buffer overflow in tif_packbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file. Desbordamiento de búfer basado en memoria dinámica en tif_packbits.c en libtiff 4.0.6 y versiones anteriores permite a atacantes remotos bloquear la aplicación a través de un archivo bmp manipulado. Multiple vulnerabilities have been found in libTIFF, the worst of which may allow execution of arbitrary code. Versions less than 4.0.7 are affected. • http://www.openwall.com/lists/oss-security/2016/04/27/6 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVE-2016-5321 – Gentoo Linux Security Advisory 201701-16
https://notcve.org/view.php?id=CVE-2016-5321
09 Jan 2017 — The DumpModeDecode function in libtiff 4.0.6 and earlier allows attackers to cause a denial of service (invalid read and crash) via a crafted tiff image. La función DumpModeDecode en libtiff 4.0.6 y versiones anteriores permite a atacantes provocar una denegación de servicio (lectura no válida y caída) a través de una imagen tiff manipulada. It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image, a remote... • http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00017.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVE-2016-5322 – Gentoo Linux Security Advisory 201701-16
https://notcve.org/view.php?id=CVE-2016-5322
09 Jan 2017 — The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tiff image. La función setByteArray en tif_dir.c en libtiff 4.0.6 y versiones anteriores permite a los atacantes remotos provocar una denegación de servicio (fuera de los límites de lectura) a través de una imagen tiff manipulada. It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into ... • http://www.debian.org/security/2017/dsa-3762 • CWE-125: Out-of-bounds Read •