4.0.6 * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:a:libtiff:libtiff:4.0.6:*:*:*:*:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2016-10371	20	DoS	2017-05-10	2018-03-22	4.3	None	Remote	Medium	Not required	None	None	Partial
The TIFFWriteDirectoryTagCheckedRational function in tif_dirwrite.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted TIFF file.
2	CVE-2016-9540	119	Overflow	2016-11-22	2018-01-05	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
tools/tiffcp.c in libtiff 4.0.6 has an out-of-bounds write on tiled images with odd tile width versus image width. Reported as MSVR 35103, aka "cpStripToTile heap-buffer-overflow."
3	CVE-2016-9539	119	Overflow	2016-11-22	2016-12-10	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
tools/tiffcrop.c in libtiff 4.0.6 has an out-of-bounds read in readContigTilesIntoBuffer(). Reported as MSVR 35092.
4	CVE-2016-9538	190	Overflow	2016-11-22	2017-11-04	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
tools/tiffcrop.c in libtiff 4.0.6 reads an undefined buffer in readContigStripsIntoBuffer() because of a uint16 integer overflow. Reported as MSVR 35100.
5	CVE-2016-9537	119	Overflow	2016-11-22	2018-01-05	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
tools/tiffcrop.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in buffers. Reported as MSVR 35093, MSVR 35096, and MSVR 35097.
6	CVE-2016-9536	119	Overflow	2016-11-22	2018-01-05	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
tools/tiff2pdf.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers in t2p_process_jpeg_strip(). Reported as MSVR 35098, aka "t2p_process_jpeg_strip heap-buffer-overflow."
7	CVE-2016-9535	119	Overflow	2016-11-22	2018-01-05	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
tif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual tile size like YCbCr with subsampling. Reported as MSVR 35105, aka "Predictor heap-buffer-overflow."
8	CVE-2016-9534	119	Overflow	2016-11-22	2018-01-05	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
tif_write.c in libtiff 4.0.6 has an issue in the error code path of TIFFFlushData1() that didn't reset the tif_rawcc and tif_rawcp members. Reported as MSVR 35095, aka "TIFFFlushData1 heap-buffer-overflow."
9	CVE-2016-9533	119	Overflow	2016-11-22	2018-01-05	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
tif_pixarlog.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers. Reported as MSVR 35094, aka "PixarLog horizontalDifference heap-buffer-overflow."
10	CVE-2016-9448	476	DoS	2017-01-27	2018-10-30	5.0	None	Remote	Low	Not required	None	None	Partial
The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by setting the tags TIFF_SETGET_C16ASCII or TIFF_SETGET_C32_ASCII to values that access 0-byte arrays. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9297.
11	CVE-2016-9297	125	DoS	2017-01-18	2017-11-04	5.0	None	Remote	Low	Not required	None	None	Partial
The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via crafted TIFF_SETGET_C16ASCII or TIFF_SETGET_C32_ASCII tag values.
12	CVE-2016-9273	125	DoS	2017-01-18	2017-11-04	4.3	None	Remote	Medium	Not required	None	None	Partial
tiffsplit in libtiff 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file, related to changing td_nstrips in TIFF_STRIPCHOP mode.
13	CVE-2016-8331		Exec Code	2016-10-28	2022-04-19	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
An exploitable remote code execution vulnerability exists in the handling of TIFF images in LibTIFF version 4.0.6. A crafted TIFF document can lead to a type confusion vulnerability resulting in remote code execution. This vulnerability can be triggered via a TIFF file delivered to the application using LibTIFF's tag extension functionality.
14	CVE-2016-5652	119	Exec Code Overflow	2017-01-06	2018-01-05	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
An exploitable heap-based buffer overflow exists in the handling of TIFF images in LibTIFF's TIFF2PDF tool. A crafted TIFF document can lead to a heap-based buffer overflow resulting in remote code execution. Vulnerability can be triggered via a saved TIFF file delivered by other means.
15	CVE-2016-5317	119	DoS Overflow	2017-01-20	2018-10-30	4.3	None	Remote	Medium	Not required	None	None	Partial
Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlier, as used in GNOME nautilus, allows attackers to cause a denial of service attack (crash) via a crafted TIFF file.
16	CVE-2016-3622	369	DoS	2016-10-03	2017-11-04	4.3	None	Remote	Medium	Not required	None	None	Partial
The fpAcc function in tif_predict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted TIFF image.
17	CVE-2016-3619	125	DoS	2016-10-03	2017-09-03	4.3	None	Remote	Medium	Not required	None	None	Partial
The DumpModeEncode function in tif_dumpmode.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c none" option is used, allows remote attackers to cause a denial of service (buffer over-read) via a crafted BMP image.
18	CVE-2016-3186	119	DoS Overflow	2016-04-19	2018-10-30	5.0	None	Remote	Low	Not required	None	None	Partial
Buffer overflow in the readextension function in gif2tiff.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (application crash) via a crafted GIF file.
19	CVE-2015-8683	119	DoS Overflow	2016-04-13	2018-01-05	4.3	None	Remote	Medium	Not required	None	None	Partial
The putcontig8bitCIELab function in tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a packed TIFF image.
20	CVE-2015-8668	119	DoS Exec Code Overflow	2016-01-08	2018-10-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a large width field in a BMP image.
21	CVE-2015-8665	119	DoS Overflow	2016-04-13	2018-01-05	4.3	None	Remote	Medium	Not required	None	None	Partial
tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via the SamplesPerPixel tag in a TIFF image.
22	CVE-2015-7554	254	DoS	2016-01-08	2018-10-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF image.

Total number of vulnerabilities : 22 Page : 1 (This Page)