Skip to content
OpenAdvisories
Unscored USN-2939-1 6 CVEs

tiff vulnerabilities

Published Mar 23, 2016 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that LibTIFF incorrectly handled certain malformed
images. If a user or automated system were tricked into opening a specially
crafted image, a remote attacker could crash the application, leading to a
denial of service, or possibly execute arbitrary code with user privileges.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS tiff 4.0.3-7ubuntu0.4

Vulnerabilities 6

  • Unscored —
    CVE-2015-8665

    tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via the Sampl…

    tiff tiff Debian Ubuntu
  • Unscored —
    CVE-2015-8683

    The putcontig8bitCIELab function in tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of servic…

    tiff tiff Debian Ubuntu
  • Unscored —
    CVE-2015-8781

    tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds write) via an invalid number of sampl…

    tiff tiff Debian Ubuntu
  • Unscored —
    CVE-2015-8782

    tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds writes) via a crafted TIFF image, a d…

    tiff tiff Debian Ubuntu
  • Unscored —
    CVE-2015-8783

    tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds reads) via a crafted TIFF image.

    tiff tiff Debian Ubuntu
  • Unscored —
    CVE-2015-8784

    The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds wr…

    tiff tiff Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2015-8665
  • report
    https://ubuntu.com/security/CVE-2015-8683
  • report
    https://ubuntu.com/security/CVE-2015-8781
  • report
    https://ubuntu.com/security/CVE-2015-8782
  • report
    https://ubuntu.com/security/CVE-2015-8783
  • report
    https://ubuntu.com/security/CVE-2015-8784