CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Libtiff : Security Vulnerabilities Published In 2016

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2016-9540 787 Overflow 2016-11-22 2018-01-04
7.5
None Remote Low Not required Partial Partial Partial
tools/tiffcp.c in libtiff 4.0.6 has an out-of-bounds write on tiled images with odd tile width versus image width. Reported as MSVR 35103, aka "cpStripToTile heap-buffer-overflow."
2 CVE-2016-9539 125 2016-11-22 2016-12-09
7.5
None Remote Low Not required Partial Partial Partial
tools/tiffcrop.c in libtiff 4.0.6 has an out-of-bounds read in readContigTilesIntoBuffer(). Reported as MSVR 35092.
3 CVE-2016-9538 190 Overflow 2016-11-22 2017-11-03
7.5
None Remote Low Not required Partial Partial Partial
tools/tiffcrop.c in libtiff 4.0.6 reads an undefined buffer in readContigStripsIntoBuffer() because of a uint16 integer overflow. Reported as MSVR 35100.
4 CVE-2016-9537 787 2016-11-22 2018-01-04
7.5
None Remote Low Not required Partial Partial Partial
tools/tiffcrop.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in buffers. Reported as MSVR 35093, MSVR 35096, and MSVR 35097.
5 CVE-2016-9536 787 Overflow 2016-11-22 2018-01-04
7.5
None Remote Low Not required Partial Partial Partial
tools/tiff2pdf.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers in t2p_process_jpeg_strip(). Reported as MSVR 35098, aka "t2p_process_jpeg_strip heap-buffer-overflow."
6 CVE-2016-9535 119 Overflow 2016-11-22 2018-01-04
7.5
None Remote Low Not required Partial Partial Partial
tif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual tile size like YCbCr with subsampling. Reported as MSVR 35105, aka "Predictor heap-buffer-overflow."
7 CVE-2016-9534 119 Overflow 2016-11-22 2018-01-04
7.5
None Remote Low Not required Partial Partial Partial
tif_write.c in libtiff 4.0.6 has an issue in the error code path of TIFFFlushData1() that didn't reset the tif_rawcc and tif_rawcp members. Reported as MSVR 35095, aka "TIFFFlushData1 heap-buffer-overflow."
8 CVE-2016-9533 787 Overflow 2016-11-22 2018-01-04
7.5
None Remote Low Not required Partial Partial Partial
tif_pixarlog.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers. Reported as MSVR 35094, aka "PixarLog horizontalDifference heap-buffer-overflow."
9 CVE-2016-8331 Exec Code 2016-10-28 2017-06-30
6.8
None Remote Medium Not required Partial Partial Partial
An exploitable remote code execution vulnerability exists in the handling of TIFF images in LibTIFF version 4.0.6. A crafted TIFF document can lead to a type confusion vulnerability resulting in remote code execution. This vulnerability can be triggered via a TIFF file delivered to the application using LibTIFF's tag extension functionality.
10 CVE-2016-3991 787 DoS Exec Code Overflow 2016-09-21 2018-10-30
6.8
None Remote Medium Not required Partial Partial Partial
Heap-based buffer overflow in the loadImage function in the tiffcrop tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted TIFF image with zero tiles.
11 CVE-2016-3990 787 DoS Exec Code Overflow 2016-09-21 2018-10-30
6.8
None Remote Medium Not required Partial Partial Partial
Heap-based buffer overflow in the horizontalDifference8 function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image to tiffcp.
12 CVE-2016-3945 787 DoS Exec Code Overflow 2016-09-21 2018-10-30
6.8
None Remote Medium Not required Partial Partial Partial
Multiple integer overflows in the (1) cvt_by_strip and (2) cvt_by_tile functions in the tiff2rgba tool in LibTIFF 4.0.6 and earlier, when -b mode is enabled, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image, which triggers an out-of-bounds write.
13 CVE-2016-3658 125 DoS 2016-10-03 2018-10-30
5.0
None Remote Low Not required None None Partial
The TIFFWriteDirectoryTagLongLong8Array function in tif_dirwrite.c in the tiffset tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via vectors involving the ma variable.
14 CVE-2016-3634 125 DoS 2016-10-03 2018-10-30
5.0
None Remote Low Not required None None Partial
The tagCompare function in tif_dirinfo.c in the thumbnail tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to field_tag matching.
15 CVE-2016-3633 125 DoS 2016-10-03 2018-10-30
5.0
None Remote Low Not required None None Partial
The setrow function in the thumbnail tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the src variable.
16 CVE-2016-3632 787 DoS Exec Code 2016-09-21 2018-10-30
6.8
None Remote Medium Not required Partial Partial Partial
The _TIFFVGetField function in tif_dirinfo.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted TIFF image.
17 CVE-2016-3631 125 DoS 2016-10-03 2018-10-30
5.0
None Remote Low Not required None None Partial
The (1) cpStrips and (2) cpTiles functions in the thumbnail tool in LibTIFF 4.0.6 and earlier allow remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the bytecounts[] array variable.
18 CVE-2016-3625 125 DoS 2016-10-03 2018-10-30
4.3
None Remote Medium Not required None None Partial
tif_read.c in the tiff2bw tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TIFF image.
19 CVE-2016-3624 787 DoS 2016-10-03 2017-11-03
5.0
None Remote Low Not required None None Partial
The cvtClump function in the rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) by setting the "-v" option to -1.
20 CVE-2016-3623 369 DoS 2016-10-03 2018-10-30
5.0
None Remote Low Not required None None Partial
The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero) by setting the (1) v or (2) h parameter to 0.
21 CVE-2016-3622 369 DoS 2016-10-03 2017-11-03
4.3
None Remote Medium Not required None None Partial
The fpAcc function in tif_predict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted TIFF image.
22 CVE-2016-3621 125 DoS 2016-10-03 2017-09-02
6.8
None Remote Medium Not required Partial Partial Partial
The LZWEncode function in tif_lzw.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c lzw" option is used, allows remote attackers to cause a denial of service (buffer over-read) via a crafted BMP image.
23 CVE-2016-3620 125 DoS 2016-10-03 2017-09-02
5.0
None Remote Low Not required None None Partial
The ZIPEncode function in tif_zip.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c zip" option is used, allows remote attackers to cause a denial of service (buffer over-read) via a crafted BMP image.
24 CVE-2016-3619 125 DoS 2016-10-03 2017-09-02
4.3
None Remote Medium Not required None None Partial
The DumpModeEncode function in tif_dumpmode.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c none" option is used, allows remote attackers to cause a denial of service (buffer over-read) via a crafted BMP image.
25 CVE-2016-3186 119 DoS Overflow 2016-04-19 2018-10-30
5.0
None Remote Low Not required None None Partial
Buffer overflow in the readextension function in gif2tiff.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (application crash) via a crafted GIF file.
26 CVE-2015-8870 20 DoS Overflow +Info 2016-12-06 2018-01-04
5.8
None Remote Medium Not required Partial None Partial
Integer overflow in tools/bmp2tiff.c in LibTIFF before 4.0.4 allows remote attackers to cause a denial of service (heap-based buffer over-read), or possibly obtain sensitive information from process memory, via crafted width and length values in RLE4 or RLE8 data in a BMP file.
27 CVE-2015-8784 119 DoS Overflow 2016-04-13 2018-01-04
4.3
None Remote Medium Not required None None Partial
The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image, as demonstrated by libtiff5.tif.
28 CVE-2015-8783 119 DoS Overflow 2016-02-01 2018-01-04
4.3
None Remote Medium Not required None None Partial
tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds reads) via a crafted TIFF image.
29 CVE-2015-8782 119 DoS Overflow 2016-02-01 2018-01-04
4.3
None Remote Medium Not required None None Partial
tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds writes) via a crafted TIFF image, a different vulnerability than CVE-2015-8781.
30 CVE-2015-8781 119 DoS Overflow 2016-02-01 2018-01-04
4.3
None Remote Medium Not required None None Partial
tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds write) via an invalid number of samples per pixel in a LogL compressed TIFF image, a different vulnerability than CVE-2015-8782.
31 CVE-2015-8683 119 DoS Overflow 2016-04-13 2018-01-04
4.3
None Remote Medium Not required None None Partial
The putcontig8bitCIELab function in tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a packed TIFF image.
32 CVE-2015-8668 119 DoS Exec Code Overflow 2016-01-08 2018-10-30
7.5
None Remote Low Not required Partial Partial Partial
Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a large width field in a BMP image.
33 CVE-2015-8665 119 DoS Overflow 2016-04-13 2018-01-04
4.3
None Remote Medium Not required None None Partial
tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via the SamplesPerPixel tag in a TIFF image.
34 CVE-2015-7554 254 DoS 2016-01-08 2018-10-30
7.5
None Remote Low Not required Partial Partial Partial
The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF image.
35 CVE-2015-1547 119 DoS Overflow 2016-04-13 2018-01-04
4.3
None Remote Medium Not required None None Partial
The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted TIFF image, as demonstrated by libtiff5.tif.
Total number of vulnerabilities : 35   Page : 1 (This Page)
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.