CVE-2014-9655

Debian Bug report logs - #776185 tiff: CVE-2014-8127 CVE-2014-8128 CVE-2014-8130 Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 25 Jan 2015 06:51:02 UTC Severity: important Tags: security, upstream Found in ver ...

Debian Bug report logs - #777390 tiff: CVE-2015-1547 Package: src:tiff; Maintainer for src:tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sat, 7 Feb 2015 22:27:06 UTC Severity: important Tags: security, upstream Found in version tiff/403-12 Fixed in ...

USN-2553-1 introduced a regression in LibTIFF ...

LibTIFF could be made to crash or run programs as your login if it opened a specially crafted file ...

William Robinet and Michal Zalewski discovered multiple vulnerabilities in the TIFF library and its tools, which may result in denial of service or the execution of arbitrary code if a malformed TIFF file is processed For the oldstable distribution (wheezy), these problems have been fixed in version 402-6+deb7u4 For the stable distribution (jes ...

The (1) putcontig8bitYCbCr21tile function in tif_getimagec or (2) NeXTDecode function in tif_nextc in LibTIFF allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted TIFF image, as demonstrated by libtiff-cvs-1tif and libtiff-cvs-2tif ...

Use of uninitialized memory was reported in in libtiff ...

Multiple flaws have been discovered in libtiff A remote attacker could exploit these flaws to cause a crash or memory corruption and, possibly, execute arbitrary code by tricking an application linked against libtiff into processing specially crafted files (CVE-2014-9655, CVE-2015-1547, CVE-2015-8784, CVE-2015-8683, CVE-2015-8665, CVE-2015-8781, ...

Multiple flaws have been discovered in libtiff A remote attacker could exploit these flaws to cause a crash or memory corruption and, possibly, execute arbitrary code by tricking an application linked against libtiff into processing specially crafted files (CVE-2014-9655, CVE-2015-1547, CVE-2015-8784, CVE-2015-8683, CVE-2015-8665, CVE-2015-8781, ...