LI
Product
libtiff
262
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 11High 70Medium 122Low 5
Watch
Add libtiff to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2006-2025 | – | Apr 25 | Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service and possibly execute… Affected: through 3.8.0; 3.4; 3.5.1; 3.5.2; 3.5.3; 3.5.4; +7 more |
| CVE-2006-2026 | – | Apr 25 | Double free vulnerability in tif_jpeg.c in libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a… Affected: through 3.8.0; 3.4; 3.5.1; 3.5.2; 3.5.3; 3.5.4; +7 more |
| CVE-2006-0405 | – | Jan 25 | The TIFFFetchShortPair function in tif_dirread.c in libtiff 3.8.0 allows remote attackers to cause a denial of service (application crash) via a crafted TIFF image that triggers a… Affected: 3.8.0 |
| CVE-2005-2452 | – | Aug 3 | libtiff up to 3.7.0 allows remote attackers to cause a denial of service (application crash) via a TIFF image header with a zero "YCbCr subsampling" value, which causes a… Affected: 3.5.5; 3.5.7; 3.6.1 |
| CVE-2005-1544 | – | May 14 | Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag Affected: 3.4; 3.5.1; 3.5.2; 3.5.3; 3.5.4; 3.5.5; +6 more |
| CVE-2004-0886 | – | Jan 27 | Multiple integer overflows in libtiff 3.6.1 and earlier allow remote attackers to cause a denial of service (crash or memory corruption) via TIFF images that lead to incorrect… Affected: 3.4; 3.5.1; 3.5.2; 3.5.3; 3.5.4; 3.5.5; +3 more |
| CVE-2004-0929 | – | Jan 27 | Heap-based buffer overflow in the OJPEGVSetField function in tif_ojpeg.c for libtiff 3.6.1 and earlier, when compiled with the OJPEG_SUPPORT (old JPEG support) option, allows… Affected: 3.6.1 |
| CVE-2004-1308 | – | Jan 10 | Integer overflow in (1) tif_dirread.c and (2) tif_fax3.c for libtiff 3.5.7 and 3.7.0 allows remote attackers to execute arbitrary code via a TIFF file containing a TIFF_ASCII or… Affected: 3.4; 3.5.1; 3.5.2; 3.5.3; 3.5.4; 3.5.5; +4 more |
| CVE-2004-1183 | – | Jan 6 | Integer overflow in the tiffdump utility for libtiff 3.7.1 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code… Affected: 3.4; 3.5.1; 3.5.2; 3.5.3; 3.5.4; 3.5.5; +6 more |
| CVE-2004-0803 | – | Dec 23 | Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to… Affected: 3.4; 3.5.1; 3.5.2; 3.5.3; 3.5.4; 3.5.5; +3 more |
| CVE-2004-1307 | – | Dec 21 | Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS… Affected: 3.4; 3.5.1; 3.5.2; 3.5.3; 3.5.4; 3.5.5; +4 more |
| CVE-2004-0804 | – | Nov 3 | Vulnerability in tif_dirread.c for libtiff allows remote attackers to cause a denial of service (application crash) via a TIFF image that causes a divide-by-zero error when the… Affected: before 3.7.0 |