Libtiff

Libtiff

261 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2016-9533

  • EPSS 0.39%
  • Veröffentlicht 22.11.2016 19:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

tif_pixarlog.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers. Reported as MSVR 35094, aka "PixarLog horizontalDifference heap-buffer-overflow."

8.1

CVE-2016-8331

Exploit
  • EPSS 7.33%
  • Veröffentlicht 28.10.2016 20:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

An exploitable remote code execution vulnerability exists in the handling of TIFF images in LibTIFF version 4.0.6. A crafted TIFF document can lead to a type confusion vulnerability resulting in remote code execution. This vulnerability can be trigge...

7.5

CVE-2016-3658

  • EPSS 0.95%
  • Veröffentlicht 03.10.2016 16:09:12
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The TIFFWriteDirectoryTagLongLong8Array function in tif_dirwrite.c in the tiffset tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via vectors involving the ma variable.

7.5

CVE-2016-3634

  • EPSS 0.69%
  • Veröffentlicht 03.10.2016 16:09:11
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The tagCompare function in tif_dirinfo.c in the thumbnail tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to field_tag matching.

7.5

CVE-2016-3633

  • EPSS 0.45%
  • Veröffentlicht 03.10.2016 16:09:10
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The setrow function in the thumbnail tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the src variable.

7.5

CVE-2016-3631

  • EPSS 0.79%
  • Veröffentlicht 03.10.2016 16:09:09
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The (1) cpStrips and (2) cpTiles functions in the thumbnail tool in LibTIFF 4.0.6 and earlier allow remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the bytecounts[] array variable.

6.5

CVE-2016-3625

  • EPSS 0.64%
  • Veröffentlicht 03.10.2016 16:09:07
  • Zuletzt bearbeitet 12.04.2025 10:46:40

tif_read.c in the tiff2bw tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TIFF image.

7.5

CVE-2016-3624

Exploit
  • EPSS 1.33%
  • Veröffentlicht 03.10.2016 16:09:06
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The cvtClump function in the rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) by setting the "-v" option to -1.

7.5

CVE-2016-3623

Exploit
  • EPSS 1.59%
  • Veröffentlicht 03.10.2016 16:09:05
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero) by setting the (1) v or (2) h parameter to 0.

6.5

CVE-2016-3622

Exploit
  • EPSS 0.91%
  • Veröffentlicht 03.10.2016 16:09:04
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The fpAcc function in tif_predict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted TIFF image.