Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2014-9655

libtiff: use of uninitialized memory in putcontig8bitYCbCr21tile and NeXTDecode

The (1) putcontig8bitYCbCr21tile function in tif_getimage.c or (2) NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted TIFF image, as demonstrated by libtiff-cvs-1.tif and libtiff-cvs-2.tif.

CVSS 3.0 · 6.5 Medium EPSS 2.5% KEV · Not listed
Vendors
Debian Redhat Remotesensing
Products
Debian Linux Enterprise Linux Libtiff
CVE-2013-1960

(tiff2pdf): Heap-based buffer overflow in t2_process_jpeg_strip()

Heap-based buffer overflow in the t2p_process_jpeg_strip function in tiff2pdf in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image file.

CVSS 2.0 · 9.3 Critical EPSS 11.8% KEV · Not listed
Vendors
Redhat Remotesensing
Products
Enterprise Linux Libtiff
CVE-2013-1961

(tiff2pdf): Stack-based buffer overflow with malformed image-length and resolution

Stack-based buffer overflow in the t2p_write_pdf_page function in tiff2pdf in libtiff before 4.0.3 allows remote attackers to cause a denial of service (application crash) via a crafted image length and resolution in a TIFF image file.

CVSS 2.0 · 9.3 Critical EPSS 5.9% KEV · Not listed
Vendors
Redhat Remotesensing
Products
Enterprise Linux Libtiff