Browse CVEs

HIGH 7.5 CVE-2012-2088EPSS 6% Integer signedness error in the TIFFReadDirectory function in tif_dirread.c in libtiff 3.9.4 and earlier allows remote attackers to cause a denial of… Libtiff after 3.9.4 Fix from $1,9502012-07-22 MEDIUM 6.8 CVE-2012-2113EPSS 6% Multiple integer overflows in tiff2pdf in libtiff before 4.0.2 allow remote attackers to cause a denial of service (application crash) or possibly ex… Libtiff after 4.0.1 Fix from $1,6002012-07-22 MEDIUM 6.8 CVE-2012-1173EPSS 7% Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a TIFF fil… Libtiff Mitigation only Fix from $1,6002012-06-04 MEDIUM 6.8 CVE-2009-5022EPSS 11% Heap-based buffer overflow in tif_ojpeg.c in the OJPEG decoder in LibTIFF before 3.9.5 allows remote attackers to execute arbitrary code via a crafte… Libtiff after 3.9.4 Fix from $1,6002011-05-03 MEDIUM 6.8 CVE-2011-1167EPSS 6% Heap-based buffer overflow in the thunder (aka ThunderScan) decoder in tif_thunder.c in LibTIFF 3.9.4 and earlier allows remote attackers to execute … Libtiff after 3.9.4 Fix from $1,6002011-03-28 MEDIUM 6.8 CVE-2010-3087 LibTIFF before 3.9.2-5.2.1 in SUSE openSUSE 11.3 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitra… Libtiff Mitigation only Fix from $1,6002010-09-28 HIGH 7.5 CVE-2010-2233 tif_getimage.c in LibTIFF 3.9.0 and 3.9.2 on 64-bit platforms, as used in ImageMagick, does not properly perform vertical flips, which allows remote … Libtiff Patch available Fix from $1,9502010-07-02 MEDIUM 5.0 CVE-2010-2443 The OJPEGReadBufferFill function in tif_ojpeg.c in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service (NULL pointer dereferenc… Libtiff after 3.9.2 Fix from $1,6002010-06-24 MEDIUM 6.8 CVE-2010-2065EPSS 6% Integer overflow in the TIFFroundup macro in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service (application crash) or possibl… Libtiff after 3.9.2 Fix from $1,6002010-06-24 HIGH 9.3 CVE-2009-2347 Multiple integer overflows in inter-color spaces conversion tools in libtiff 3.8 through 3.8.2, 3.9, and 4.0 allow context-dependent attackers to exe… Libtiff Patch available Fix from $1,9502009-07-14 MEDIUM 6.8 CVE-2008-2327 Multiple buffer underflows in the (1) LZWDecode, (2) LZWDecodeCompat, and (3) LZWDecodeVector functions in tif_lzw.c in the LZW decoder in LibTIFF 3.… Libtiff after 3.8.2 Fix from $1,6002008-08-27 HIGH 7.8 CVE-2006-3463 The EstimateStripByteCounts function in TIFF library (libtiff) before 3.8.2 uses a 16-bit unsigned short when iterating over an unsigned 32-bit value… Libtiff after 3.8.1 Fix from $1,9502006-08-03 HIGH 7.5 CVE-2006-3459EPSS 53% Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow context-dep… Libtiff after 3.8.1 Fix from $1,9502006-08-03 HIGH 7.5 CVE-2006-3460 Heap-based buffer overflow in the JPEG decoder in the TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to cause a denial of ser… Libtiff after 3.8.1 Fix from $1,9502006-08-03 HIGH 7.5 CVE-2006-3461EPSS 5% Heap-based buffer overflow in the PixarLog decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbi… Libtiff after 3.8.1 Fix from $1,9502006-08-03 HIGH 7.5 CVE-2006-3462EPSS 5% Heap-based buffer overflow in the NeXT RLE decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbi… Libtiff after 3.8.1 Fix from $1,9502006-08-03 HIGH 7.5 CVE-2006-3464 TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to pass numeric range checks and possibly execute code, and trigger assert err… Libtiff after 3.8.1 Fix from $1,9502006-08-03 HIGH 7.5 CVE-2006-3465EPSS 6% Unspecified vulnerability in the custom tag support for the TIFF library (libtiff) before 3.8.2 allows remote attackers to cause a denial of service … Libtiff after 3.8.1 Fix from $1,9502006-08-03 HIGH 7.5 CVE-2006-2193EPSS 5% Buffer overflow in the t2p_write_pdf_string function in tiff2pdf in libtiff 3.8.2 and earlier allows attackers to cause a denial of service (crash) a… Libtiff after 3.8.2 Fix from $1,9502006-06-08 HIGH 7.5 CVE-2006-2656EPSS 14% Stack-based buffer overflow in the tiffsplit command in libtiff 3.8.2 and earlier might might allow attackers to execute arbitrary code via a long fi… Libtiff after 3.8.2 Fix from $1,9502006-05-30 MEDIUM 6.5 CVE-2006-2025EPSS 11% Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows context-dependent attackers to cause a denial of serv… Libtiff after 3.8.0 Fix from $1,6002006-04-25 MEDIUM 6.5 CVE-2006-2026EPSS 10% Double free vulnerability in tif_jpeg.c in libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service (crash) and possibly … Libtiff after 3.8.0 Fix from $1,6002006-04-25 MEDIUM 5.0 CVE-2006-0405 The TIFFFetchShortPair function in tif_dirread.c in libtiff 3.8.0 allows remote attackers to cause a denial of service (application crash) via a craf… Libtiff Mitigation only Fix from $1,6002006-01-25 MEDIUM 5.0 CVE-2005-2452 libtiff up to 3.7.0 allows remote attackers to cause a denial of service (application crash) via a TIFF image header with a zero "YCbCr subsampling" … Libtiff Mitigation only Fix from $1,6002005-08-03 HIGH 7.5 CVE-2005-1544EPSS 14% Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample … Libtiff Patch available Fix from $1,9502005-05-14 HIGH 10.0 CVE-2004-0929EPSS 8% Heap-based buffer overflow in the OJPEGVSetField function in tif_ojpeg.c for libtiff 3.6.1 and earlier, when compiled with the OJPEG_SUPPORT (old JPE… Libtiff Patch available Fix from $1,9502005-01-27 HIGH 10.0 CVE-2004-1308EPSS 15% Integer overflow in (1) tif_dirread.c and (2) tif_fax3.c for libtiff 3.5.7 and 3.7.0 allows remote attackers to execute arbitrary code via a TIFF fil… Libtiff Patch available Fix from $1,9502005-01-10 MEDIUM 5.1 CVE-2004-1183 Integer overflow in the tiffdump utility for libtiff 3.7.1 and earlier allows remote attackers to cause a denial of service (application crash) and p… Libtiff Patch available Fix from $1,6002005-01-06