الباحثون
رجوع
4Ugustus
#4023
من 60,401
74.7
إجمالي CVSS
الثغرات
·
10
متوسطة
2
عالية
8
PT-2023-4910
2023-02-12
6.8
CVE-2023-0800
Libtiff
Libtiff
The issue is related to an out-of-bounds write in the tiffcrop utility of the libtiff library, specifically in tools/tiffcrop.c:3502. This can be exploited to cause a denial-of-service via a crafted tiff file.
PT-2023-4908
2023-01-29
6.8
CVE-2022-4645
Libtiff
Libtiff
The issue is related to an out-of-bounds read in the `tiffcp` utility, located in `tools/tiffcp.c:948`, which can be exploited by attackers to cause a denial-of-service via a crafted tiff file. This can lead to a disruption in service.
PT-2022-6889
2022-10-21
10
CVE-2022-3599
Libtiff
Libtiff
The issue is related to an out-of-bounds read in the `writeSingleSection` function of the LibTIFF library, which can be exploited by attackers to cause a denial-of-service via a crafted tiff file.
PT-2022-6484
2022-06-30
7.1
CVE-2022-2056
Libtiff
Libtiff
The issue is related to a Divide By Zero error in the tiffcrop function of libtiff, which can be exploited by attackers to cause a denial-of-service via a crafted tiff file. This can be achieved by a remote attacker.
PT-2022-6477
2022-06-30
7.1
CVE-2022-2057
Libtiff
Libtiff
The issue is related to a Divide By Zero error in the `tiffcrop` function of the LibTIFF library. This error can be exploited by a remote attacker to cause a denial-of-service using a specially crafted tiff file. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.
PT-2022-6890
2022-03-21
7.8
CVE-2022-3627
Libtiff
Libtiff
The issue is related to an out-of-bounds write in the ` TIFFmemcpy` function, allowing attackers to cause a denial-of-service via a crafted tiff file. This can be triggered when ` TIFFmemcpy` is called from `extractImageSection` in `tools/tiffcrop.c:6860`. The vulnerability may allow a remote attacker to cause a denial-of-service.
PT-2022-4778
2022-03-11
7.1
CVE-2022-0909
Libtiff
Libtiff
The issue is related to a Divide By Zero error in the tiffcrop function of libtiff, which allows attackers to cause a denial-of-service via a crafted tiff file. This can be exploited by a remote attacker to disrupt service.
PT-2022-4800
2022-03-11
7.1
CVE-2022-0907
Libtiff
Libtiff
The issue is related to errors in pointer dereferencing, allowing a remote attacker to cause a denial-of-service using a specially crafted tiff file. This can be achieved through the `tiffcrop` function in libtiff. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.
PT-2022-4785
2022-03-11
7.8
CVE-2022-0924
Libtiff
Libtiff
The issue is related to an out-of-bounds read error in the tiffcp component of libtiff, which allows attackers to cause a denial-of-service via a crafted tiff file. This can be exploited by a remote attacker to disrupt service.
PT-2022-4783
2022-01-04
7.1
CVE-2022-22844
Libtiff
Libtiff
The issue is related to an out-of-bounds read in the ` TIFFmemcpy` function in `tif unix.c`, which can occur under certain conditions involving a custom tag and `0x0200` as the second word of the DE field. This can potentially allow a remote attacker to cause a denial of service.