Overview 262 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 16 public PoC · 1 EPSS ≥ 0.5
262matches
0in Waratek scope0.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
16public PoC6.1%
1EPSS ≥ 0.50.4%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
13
5.0%
Not applicable
249
95.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
262
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
16
6.1%
Proof of concept only
34
13.0%
Forecast only
0
0.0%
No public exploit
212
80.9%
split by
peak 60 / year
20043
Not applicable3
High2
Medium1
not blocked3
No public exploit3
20056
Not applicable6
High3
Medium3
not blocked6
Working exploit published1
No public exploit5
200614
Not applicable14
High9
Medium4
Low1
not blocked14
Working exploit published5
No public exploit9
20070
20081
Not applicable1
Medium1
not blocked1
No public exploit1
20092
Not applicable2
High1
Medium1
not blocked2
Working exploit published1
No public exploit1
201013
Not applicable13
High1
Medium12
not blocked13
Working exploit published3
No public exploit10
20113
Not applicable3
Medium3
not blocked3
Working exploit published1
No public exploit2
20126
Not applicable6
High1
Medium5
not blocked6
No public exploit6
20134
Not applicable4
Medium4
not blocked4
No public exploit4
20141
Not applicable1
Medium1
not blocked1
No public exploit1
20151
Not applicable1
Medium1
not blocked1
No public exploit1
201635
Not applicable35
Critical10
High14
Medium11
not blocked35
No public exploit35
201760
Not applicable60
Critical1
High30
Medium29
not blocked60
Working exploit published4
No public exploit56
201822
Not applicable22
High11
Medium11
not blocked22
Working exploit published1
No public exploit21
20195
Not applicable5
High3
Medium2
not blocked5
No public exploit5
20201
Not applicable1
Medium1
not blocked1
No public exploit1
20214
Not applicable4
High2
Medium2
not blocked4
No public exploit4
202234
Outside Waratek scope13
Not applicable21
High4
Medium30
not blocked34
Proof of concept only7
No public exploit27
202333
Not applicable33
High1
Medium32
not blocked33
Proof of concept only20
No public exploit13
20243
Not applicable3
High3
not blocked3
Proof of concept only1
No public exploit2
20257
Not applicable7
Medium2
Low5
not blocked7
Proof of concept only6
No public exploit1
20264
Not applicable4
Critical1
High1
Medium2
not blocked4
No public exploit4
200420062008201020122014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2015-8683 | Medium | 2016-04-13 | Not applicable | No public exploit | The putcontig8bitCIELab function in tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a packed TIFF image. |
| CVE-2015-8665 | Medium | 2016-04-13 | Not applicable | No public exploit | tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via the SamplesPerPixel tag in a TIFF image. |
| CVE-2015-1547 | Medium | 2016-04-13 | Not applicable | No public exploit | The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted TIFF image, as demonstrated by libtiff5.tif. |
| CVE-2015-8783 | Medium | 2016-02-01 | Not applicable | No public exploit | tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds reads) via a crafted TIFF image. |
| CVE-2015-8782 | Medium | 2016-02-01 | Not applicable | No public exploit | tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds writes) via a crafted TIFF image, a different vulnerability than CVE-2015-8781. |
| CVE-2015-8781 | Medium | 2016-02-01 | Not applicable | No public exploit | tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds write) via an invalid number of samples per pixel in a LogL compressed TIFF image, a different vulnerability than CVE-2015-8782. |
| CVE-2015-8668 | Critical | 2016-01-08 | Not applicable | No public exploit | Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a large width field in a BMP image. |
| CVE-2015-7554 | Critical | 2016-01-08 | Not applicable | No public exploit | The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF image. |
| CVE-2014-9330 | Medium | 2015-01-20 | Not applicable | No public exploit | Integer overflow in tif_packbits.c in bmp2tif in libtiff 4.0.3 allows remote attackers to cause a denial of service (crash) via crafted BMP image, related to dimensions, which triggers an out-of-bounds read. |
| CVE-2013-4231 | Medium | 2014-01-19 | Not applicable | No public exploit | Multiple buffer overflows in libtiff before 4.0.3 allow remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1) extension block in a GIF image or (2) GIF raster image to tools/gif2tiff.c or (3) a long filename for a TIFF image to tools/rgb2ycbcr.c. NOTE: vectors 1 and 3 are disputed by Red Hat, which states that the input cannot exceed the allocated buffer size. |
| CVE-2013-4244 | Medium | 2013-09-28 | Not applicable | No public exploit | The LZW decompressor in the gif2tiff tool in libtiff 4.0.3 and earlier allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a crafted GIF image. |
| CVE-2013-4243 | Medium | 2013-09-10 | Not applicable | No public exploit | Heap-based buffer overflow in the readgifimage function in the gif2tiff tool in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted height and width values in a GIF image. |
| CVE-2013-4232 | Medium | 2013-09-10 | Not applicable | No public exploit | Use-after-free vulnerability in the t2p_readwrite_pdf_image function in tools/tiff2pdf.c in libtiff 4.0.3 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted TIFF image. |
| CVE-2012-5581 | Medium | 2013-01-04 | Not applicable | No public exploit | Stack-based buffer overflow in tif_dir.c in LibTIFF before 4.0.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DOTRANGE tag in a TIFF image. |
| CVE-2012-4564 | Medium | 2012-11-11 | Not applicable | No public exploit | ppm2tiff does not check the return value of the TIFFScanlineSize function, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PPM image that triggers an integer overflow, a zero-memory allocation, and a heap-based buffer overflow. |
| CVE-2012-4447 | Medium | 2012-10-28 | Not applicable | No public exploit | Heap-based buffer overflow in tif_pixarlog.c in LibTIFF before 4.0.3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted TIFF image using the PixarLog Compression format. |
| CVE-2012-3401 | Medium | 2012-08-13 | Not applicable | No public exploit | The t2p_read_tiff_init function in tiff2pdf (tools/tiff2pdf.c) in LibTIFF 4.0.2 and earlier does not properly initialize the T2P context struct pointer in certain error conditions, which allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image that triggers a heap-based buffer overflow. |
| CVE-2012-2113 | Medium | 2012-07-22 | Not applicable | No public exploit | Multiple integer overflows in tiff2pdf in libtiff before 4.0.2 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow. |
| CVE-2012-2088 | High | 2012-07-22 | Not applicable | No public exploit | Integer signedness error in the TIFFReadDirectory function in tif_dirread.c in libtiff 3.9.4 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a negative tile depth in a tiff image, which triggers an improper conversion between signed and unsigned types, leading to a heap-based buffer overflow. |
| CVE-2012-1173 | Medium | 2012-06-04 | Not applicable | No public exploit | Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a TIFF file, which is not properly handled by the (1) gtTileSeparate or (2) gtStripSeparate function, leading to a heap-based buffer overflow. |
| CVE-2010-4665 | Medium | 2011-05-03 | Not applicable | No public exploit | Integer overflow in the ReadDirectory function in tiffdump.c in tiffdump in LibTIFF before 3.9.5 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TIFF file containing a directory data structure with many directory entries. |
| CVE-2009-5022 | Medium | 2011-05-03 | Not applicable | Working exploit published | Heap-based buffer overflow in tif_ojpeg.c in the OJPEG decoder in LibTIFF before 3.9.5 allows remote attackers to execute arbitrary code via a crafted TIFF file. |
| CVE-2011-1167 | Medium | 2011-03-28 | Not applicable | No public exploit | Heap-based buffer overflow in the thunder (aka ThunderScan) decoder in tif_thunder.c in LibTIFF 3.9.4 and earlier allows remote attackers to execute arbitrary code via crafted THUNDER_2BITDELTAS data in a .tiff file that has an unexpected BitsPerSample value. |
| CVE-2010-3087 | Medium | 2010-09-28 | Not applicable | No public exploit | LibTIFF before 3.9.2-5.2.1 in SUSE openSUSE 11.3 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted TIFF image. |
| CVE-2010-2631 | Medium | 2010-07-06 | Not applicable | Working exploit published | LibTIFF 3.9.0 ignores tags in certain situations during the first stage of TIFF file processing and does not properly handle this during the second stage, which allows remote attackers to cause a denial of service (application crash) via a crafted file, a different vulnerability than CVE-2010-2481. |
| CVE-2010-2630 | Medium | 2010-07-06 | Not applicable | Working exploit published | The TIFFReadDirectory function in LibTIFF 3.9.0 does not properly validate the data types of codec-specific tags that have an out-of-order position in a TIFF file, which allows remote attackers to cause a denial of service (application crash) via a crafted file, a different vulnerability than CVE-2010-2481. |
| CVE-2010-2483 | Medium | 2010-07-06 | Not applicable | No public exploit | The TIFFRGBAImageGet function in LibTIFF 3.9.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a TIFF file with an invalid combination of SamplesPerPixel and Photometric values. |
| CVE-2010-2482 | Medium | 2010-07-06 | Not applicable | Working exploit published | LibTIFF 3.9.4 and earlier does not properly handle an invalid td_stripbytecount field, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted TIFF file, a different vulnerability than CVE-2010-2443. |
| CVE-2010-2481 | Medium | 2010-07-06 | Not applicable | No public exploit | The TIFFExtractData macro in LibTIFF before 3.9.4 does not properly handle unknown tag types in TIFF directory entries, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted TIFF file. |
| CVE-2010-2597 | Medium | 2010-07-02 | Not applicable | No public exploit | The TIFFVStripSize function in tif_strip.c in LibTIFF 3.9.0 and 3.9.2 makes incorrect calls to the TIFFGetField function, which allows remote attackers to cause a denial of service (application crash) via a crafted TIFF image, related to "downsampled OJPEG input" and possibly related to a compiler optimization that triggers a divide-by-zero error. |
| CVE-2010-2596 | Medium | 2010-07-02 | Not applicable | No public exploit | The OJPEGPostDecode function in tif_ojpeg.c in LibTIFF 3.9.0 and 3.9.2, as used in tiff2ps, allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted TIFF image, related to "downsampled OJPEG input." |
| CVE-2010-2595 | Medium | 2010-07-02 | Not applicable | No public exploit | The TIFFYCbCrtoRGB function in LibTIFF 3.9.0 and 3.9.2, as used in ImageMagick, does not properly handle invalid ReferenceBlackWhite values, which allows remote attackers to cause a denial of service (application crash) via a crafted TIFF image that triggers an array index error, related to "downsampled OJPEG input." |
| CVE-2010-2233 | High | 2010-07-02 | Not applicable | No public exploit | tif_getimage.c in LibTIFF 3.9.0 and 3.9.2 on 64-bit platforms, as used in ImageMagick, does not properly perform vertical flips, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TIFF image, related to "downsampled OJPEG input." |
| CVE-2010-2443 | Medium | 2010-06-24 | Not applicable | No public exploit | The OJPEGReadBufferFill function in tif_ojpeg.c in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an OJPEG image with undefined strip offsets, related to the TIFFVGetField function. |
| CVE-2010-2067 | Medium | 2010-06-24 | Not applicable | No public exploit | Stack-based buffer overflow in the TIFFFetchSubjectDistance function in tif_dirread.c in LibTIFF before 3.9.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long EXIF SubjectDistance field in a TIFF file. |
| CVE-2010-2065 | Medium | 2010-06-24 | Not applicable | No public exploit | Integer overflow in the TIFFroundup macro in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TIFF file that triggers a buffer overflow. |
| CVE-2009-2347 | High | 2009-07-14 | Not applicable | No public exploit | Multiple integer overflows in inter-color spaces conversion tools in libtiff 3.8 through 3.8.2, 3.9, and 4.0 allow context-dependent attackers to execute arbitrary code via a TIFF image with large (1) width and (2) height values, which triggers a heap-based buffer overflow in the (a) cvt_whole_image function in tiff2rgba and (b) tiffcvt function in rgb2ycbcr. |
| CVE-2009-2285 | Medium | 2009-07-01 | Not applicable | Working exploit published | Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial of service (crash) via a crafted TIFF image, a different vulnerability than CVE-2008-2327. |
| CVE-2008-2327 | Medium | 2008-08-27 | Not applicable | No public exploit | Multiple buffer underflows in the (1) LZWDecode, (2) LZWDecodeCompat, and (3) LZWDecodeVector functions in tif_lzw.c in the LZW decoder in LibTIFF 3.8.2 and earlier allow context-dependent attackers to execute arbitrary code via a crafted TIFF file, related to improper handling of the CODE_CLEAR code. |
| CVE-2006-3465 | High | 2006-08-03 | Not applicable | No public exploit | Unspecified vulnerability in the custom tag support for the TIFF library (libtiff) before 3.8.2 allows remote attackers to cause a denial of service (instability or crash) and execute arbitrary code via unknown vectors. |
| CVE-2006-3464 | High | 2006-08-03 | Not applicable | No public exploit | TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to pass numeric range checks and possibly execute code, and trigger assert errors, via large offset values in a TIFF directory that lead to an integer overflow and other unspecified vectors involving "unchecked arithmetic operations". |
| CVE-2006-3463 | High | 2006-08-03 | Not applicable | No public exploit | The EstimateStripByteCounts function in TIFF library (libtiff) before 3.8.2 uses a 16-bit unsigned short when iterating over an unsigned 32-bit value, which allows context-dependent attackers to cause a denial of service via a large td_nstrips value, which triggers an infinite loop. |
| CVE-2006-3462 | High | 2006-08-03 | Not applicable | No public exploit | Heap-based buffer overflow in the NeXT RLE decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors involving decoding large RLE images. |
| CVE-2006-3461 | High | 2006-08-03 | Not applicable | No public exploit | Heap-based buffer overflow in the PixarLog decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors. |
| CVE-2006-3460 | High | 2006-08-03 | Not applicable | No public exploit | Heap-based buffer overflow in the JPEG decoder in the TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an encoded JPEG stream that is longer than the scan line size (TiffScanLineSize). |
| CVE-2006-3459 | High | 2006-08-03 | Not applicable | Working exploit published | Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow context-dependent attackers to execute arbitrary code or cause a denial of service via unspecified vectors, including a large tdir_count value in the TIFFFetchShortPair function in tif_dirread.c. |
| CVE-2006-2193 | High | 2006-06-08 | Not applicable | No public exploit | Buffer overflow in the t2p_write_pdf_string function in tiff2pdf in libtiff 3.8.2 and earlier allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a TIFF file with a DocumentName tag that contains UTF-8 characters, which triggers the overflow when a character is sign extended to an integer that produces more digits than expected in an sprintf call. |
| CVE-2006-2656 | High | 2006-05-30 | Not applicable | Working exploit published | Stack-based buffer overflow in the tiffsplit command in libtiff 3.8.2 and earlier might might allow attackers to execute arbitrary code via a long filename. NOTE: tiffsplit is not setuid. If there is not a common scenario under which tiffsplit is called with attacker-controlled command line arguments, then perhaps this issue should not be included in CVE. |
| CVE-2006-2120 | Low | 2006-05-01 | Not applicable | No public exploit | The TIFFToRGB function in libtiff before 3.8.1 allows remote attackers to cause a denial of service (crash) via a crafted TIFF image with Yr/Yg/Yb values that exceed the YCR/YCG/YCB values, which triggers an out-of-bounds read. |
| CVE-2006-2026 | Medium | 2006-04-25 | Not applicable | Working exploit published | Double free vulnerability in tif_jpeg.c in libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image that triggers errors related to "setfield/getfield methods in cleanup functions." |
| CVE-2006-2025 | Medium | 2006-04-25 | Not applicable | Working exploit published | Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted TIFF image. |
| CVE-2006-2024 | Medium | 2006-04-25 | Not applicable | Working exploit published | Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a TIFF image that triggers errors in (1) the TIFFFetchAnyArray function in (a) tif_dirread.c; (2) certain "codec cleanup methods" in (b) tif_lzw.c, (c) tif_pixarlog.c, and (d) tif_zip.c; (3) and improper restoration of setfield and getfield methods in cleanup functions within (e) tif_jpeg.c, tif_pixarlog.c, (f) tif_fax3.c, and tif_zip.c. |
| CVE-2006-0405 | Medium | 2006-01-25 | Not applicable | No public exploit | The TIFFFetchShortPair function in tif_dirread.c in libtiff 3.8.0 allows remote attackers to cause a denial of service (application crash) via a crafted TIFF image that triggers a NULL pointer dereference, possibly due to changes in type declarations and/or the TIFFVSetField function. |
| CVE-2005-2452 | Medium | 2005-08-03 | Not applicable | No public exploit | libtiff up to 3.7.0 allows remote attackers to cause a denial of service (application crash) via a TIFF image header with a zero "YCbCr subsampling" value, which causes a divide-by-zero error in (1) tif_strip.c and (2) tif_tile.c, a different vulnerability than CVE-2004-0804. |
| CVE-2005-1544 | High | 2005-05-14 | Not applicable | Working exploit published | Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag. |
| CVE-2004-0929 | High | 2005-01-27 | Not applicable | No public exploit | Heap-based buffer overflow in the OJPEGVSetField function in tif_ojpeg.c for libtiff 3.6.1 and earlier, when compiled with the OJPEG_SUPPORT (old JPEG support) option, allows remote attackers to execute arbitrary code via a malformed TIFF image. |
| CVE-2004-0886 | Medium | 2005-01-27 | Not applicable | No public exploit | Multiple integer overflows in libtiff 3.6.1 and earlier allow remote attackers to cause a denial of service (crash or memory corruption) via TIFF images that lead to incorrect malloc calls. |
| CVE-2004-1308 | High | 2005-01-10 | Not applicable | No public exploit | Integer overflow in (1) tif_dirread.c and (2) tif_fax3.c for libtiff 3.5.7 and 3.7.0 allows remote attackers to execute arbitrary code via a TIFF file containing a TIFF_ASCII or TIFF_UNDEFINED directory entry with a -1 entry count, which leads to a heap-based buffer overflow. |
| CVE-2004-1183 | Medium | 2005-01-06 | Not applicable | No public exploit | Integer overflow in the tiffdump utility for libtiff 3.7.1 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted TIFF file. |
| CVE-2004-0803 | High | 2004-12-23 | Not applicable | No public exploit | Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files. |
| CVE-2004-1307 | High | 2004-12-21 | Not applicable | No public exploit | Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overflow. |
| CVE-2004-0804 | Medium | 2004-11-03 | Not applicable | No public exploit | Vulnerability in tif_dirread.c for libtiff allows remote attackers to cause a denial of service (application crash) via a TIFF image that causes a divide-by-zero error when the number of row bytes is zero, a different vulnerability than CVE-2005-2452. |