2288
|
blo
|
P1
|
AIX
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiffcpp is giving error while meging tiff to pdf file
|
2525
|
min
|
P1
|
All
|
warmerdam@pobox.com
|
RESO
|
LATE
|
added support for more private tags (small patch included)
|
2609
|
cri
|
P1
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiffcp: heap-based buffer overflow in cpSeparateBufToContigBuf (tiffcp.c)
|
2652
|
cri
|
P1
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
NULL pointer dereference in tif_unix.c
|
2655
|
cri
|
P1
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Out-of-Bound read and write issue that can occur in function put1bitbwtile()(tiff-4.0.7/libtiff/tif-getimage.c:1352) that called by tiffttopnm(netpbm 10.47.63).
|
2663
|
cri
|
P1
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Write out of bound in tools/tiff2pdf
|
2669
|
enh
|
P1
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
I test tiff2pdf with honggfuzz and find this crash. This vulnerability is due to compression jpeg caused.
|
2681
|
cri
|
P1
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
libtiff:memory leak in tiff2pdf.c:808
|
2683
|
nor
|
P1
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
libtiff:memory allocation failed in tiff2pdf.c:808
|
2684
|
cri
|
P1
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiffcrop.c:4148:heap buffer overflow in combineSeparateSamples32bits
|
2685
|
cri
|
P1
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiffcrop.c:4021:heap buffer overflow in combineSeparateSamples24bits
|
2686
|
cri
|
P1
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiffcrop.c:3911:heap buffer overflow in combineSeparateSamples16bits
|
2687
|
cri
|
P1
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiff2ps.c:2487:heap buffer overflow in PSDataColorContig
|
2707
|
blo
|
P1
|
All
|
warmerdam@pobox.com
|
RESO
|
LATE
|
There is a memory malloc failure in tif_jbig.c of the libtiff library. A crafted TIFF document can lead to a abort in program.
|
2734
|
cri
|
P1
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
heap-buffer-overflow in tiff2ps
|
2746
|
cri
|
P1
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiff2pdf: heap-use-after-free
|
2750
|
blo
|
P1
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
There is a heap buffer overflow in the pal2rgb tool of the tiff library. A crafted TIFF document can lead to a heap based buffer overflow.
|
2753
|
cri
|
P1
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiffcrop: heap-buffer-overflow in extractContigSamples24bits (tiffcrop.c)
|
2754
|
cri
|
P1
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiff2ps: heap-buffer-overflow in PSDataColorContig (tiff2ps.c)
|
2755
|
cri
|
P1
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiffcp: memory malloc failure in cpDecodedStrips (tiffcp.c)
|
2756
|
cri
|
P1
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiff2pdf: memory malloc failure in t2p_readwrite_pdf_image (tiff2pdf.c)
|
2757
|
cri
|
P1
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiffcrop: memory malloc failure in readSeparateTilesIntoBuffer (tiffcrop.c)
|
2758
|
cri
|
P1
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiffinfo: memory malloc failure in TIFFReadRawData (tiffinfo.c)
|
2773
|
enh
|
P1
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Null Pointer Dereference in tiff_dir.c.
|
2796
|
cri
|
P1
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiff2pdf: Use-After-Free in t2p_writeproc function
|
2817
|
enh
|
P1
|
All
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Versions missing from Bugzilla
|
2832
|
maj
|
P1
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiffcrop.c:7953 heap-based buffer overflow in writeCroppedImage
|
2845
|
cri
|
P1
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
OOM bugs in tiff2ps
|
2854
|
cri
|
P1
|
All
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Potential heap overflow in tiff2pdf
|
2327
|
enh
|
P2
|
All
|
dkelly@apago.com
|
RESO
|
LATE
|
Add support to tiff2pdf for creating PDF/A-1b files
|
1893
|
nor
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiff2pdf produce unreadable file if TIFF is compressed with JPEG
|
1941
|
nor
|
P2
|
Wind
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Win64 problem with tif_win32.c's TIFFOpen() use of HANDLE (w/patch)
|
1960
|
nor
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiff2pdf: Line shift in right tiff tiles of output pdf (if jpeg compressed tiles in input tiff)
|
2047
|
enh
|
P2
|
Wind
|
warmerdam@pobox.com
|
RESO
|
LATE
|
icc profile not read
|
2073
|
nor
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
TIFFWriteScanline corrupts buffer when compression with predication is enabled
|
2101
|
enh
|
P2
|
Wind
|
warmerdam@pobox.com
|
RESO
|
LATE
|
C# wrapper for libtiff is available
|
2110
|
nor
|
P2
|
Wind
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Fax3Encode2DRow reads memory after refline's end
|
2112
|
nor
|
P2
|
NetB
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tag name handling with TIFFMergeFieldInfo()
|
2115
|
maj
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiff converts to empty pdf
|
2116
|
nor
|
P2
|
Wind
|
warmerdam@pobox.com
|
RESO
|
LATE
|
DotRange tag not handled correctly
|
2128
|
enh
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Make pointers returned via TIFFGetField const ?
|
2135
|
nor
|
P2
|
All
|
warmerdam@pobox.com
|
RESO
|
LATE
|
two fixes for JPEG support
|
2140
|
nor
|
P2
|
All
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiffcmp dumps core on downsampled JPEG files
|
2147
|
enh
|
P2
|
Wind
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Add support for IBM MMR encoding
|
2175
|
maj
|
P2
|
Wind
|
warmerdam@pobox.com
|
RESO
|
LATE
|
_TIFFVGetField and _TIFFVSetField using different count types
|
2190
|
enh
|
P2
|
All
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tools should have consistent behavior for help (-h) cases
|
2202
|
nor
|
P2
|
Wind
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiffset -sf 333 filename ignores field_passcount
|
2217
|
enh
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
libtiff should be build with -fvisibility=hidden
|
2219
|
enh
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
libtiff has many globals
|
2239
|
enh
|
P2
|
Wind
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Moving the implementation of the TIFF tools into public functions
|
2249
|
nor
|
P2
|
All
|
warmerdam@pobox.com
|
RESO
|
LATE
|
_tiffSizeProc's error result doesn't match _tiffMapProc's expectation
|
2252
|
enh
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
The implementation of TIFFGetConfiguredCODECs() seems to be incorrect
|
2255
|
enh
|
P2
|
All
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Patch adding thread-safe API
|
2271
|
nor
|
P2
|
Wind
|
warmerdam@pobox.com
|
RESO
|
LATE
|
multi-band 1-bit CCITT-compressed TIFFs write incorrectly
|
2273
|
enh
|
P2
|
All
|
warmerdam@pobox.com
|
RESO
|
LATE
|
LIBTIFF issues with IPTC from CS5 files.
|
2275
|
enh
|
P2
|
Wind
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Missing man page for TIFFCleanup()
|
2302
|
nor
|
P2
|
Sola
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiffsplit crashes on Solaris (sparc and intel), okay on Linux
|
2330
|
nor
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiff2pdf changes tiff image order
|
2333
|
maj
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
No manual page for TIFFCurrentDirectory(3TIFF)
|
2355
|
enh
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Segmentation fault splitting large TIFFs with tiffsplit
|
2363
|
min
|
P2
|
MacO
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiffgt.c failed to build on mac lion 10.7.2
|
2380
|
enh
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
enhancement to tiff2ps
|
2385
|
min
|
P2
|
Wind
|
warmerdam@pobox.com
|
RESO
|
LATE
|
_tiffSizeProc may not work correctly under Windows
|
2403
|
nor
|
P2
|
Wind
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Problem decoding subsampled ITULAB TIFF_JPEG images
|
2407
|
enh
|
P2
|
Wind
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Cannot read signed long
|
2411
|
maj
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiff2pdf strange output colors with TIFF/ZIP or TIFF/JPEG input files
|
2414
|
nor
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
raw_decode test does not work with libjpeg-turbo
|
2417
|
maj
|
P2
|
MacO
|
warmerdam@pobox.com
|
RESO
|
LATE
|
TIFFCheckpointDirectory not working when writing two IFDs
|
2424
|
nor
|
P2
|
Free
|
warmerdam@pobox.com
|
RESO
|
LATE
|
PDF subject information field not suppressed by tiff2pdf with parameter -s ""
|
2431
|
nor
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Tiffcp "none" -> "jbig" fails, but "lzw" -> "jbig" and "zip" -> "jbig" succeeded
|
2434
|
nor
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Problem decoding some FAX4 images
|
2438
|
nor
|
P2
|
Wind
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Fax4Decode: Bad code word error encountered but output image is still generated
|
2442
|
enh
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiff2pdf renders pdf with severely degredaded images
|
2444
|
enh
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
find0span and find1span in tif_fax3.c are Valgrind- and MemorySanitizer-unfriendly
|
2461
|
enh
|
P2
|
Wind
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Make TIFFSetDirectory compatible with more than 64'000 directories
|
2464
|
min
|
P2
|
MacO
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Interference of uint64 with Security Framework
|
2469
|
enh
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Uninitialized variable: lpBits
|
2474
|
nor
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiffcmp may get confused on 12-bit color images with an odd number of pixels per scanline
|
2502
|
nor
|
P2
|
Wind
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Premature EOL at line 0 of strip 0 (got 0, expected 1728)
|
2505
|
enh
|
P2
|
All
|
warmerdam@pobox.com
|
RESO
|
LATE
|
12 and 16 bpp support for ppm2tiff
|
2507
|
tri
|
P2
|
All
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Documentation out of sync with implementation regarding tmsize_t vs. tsize_t
|
2513
|
enh
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
TIFFTAG_CFAPATTERN should be variable count
|
2524
|
nor
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
DoS with a crafted tiff file
|
2527
|
enh
|
P2
|
All
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Libtiff can not open a tiff image created by an online merge tool
|
2528
|
enh
|
P2
|
All
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Improve multipage Tiff by eliminating walk through linked list in TIFFLinkDirectory
|
2531
|
enh
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
two memory error in the libtiff tiffsplit tool
|
2532
|
enh
|
P2
|
All
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Pass Debian and Chromium's licensecheck tool
|
2533
|
nor
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tix_aux TIFFVGetFieldDefaulted supplies no default value for TIFFTAG_PHOTOMETRIC
|
2534
|
enh
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiff2bw cuts multipage tiff file to single page
|
2537
|
nor
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
TIFFReadScanline produces different output from TIFFRGBA variants
|
2538
|
enh
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Function casing is incorrect in examples
|
2571
|
enh
|
P2
|
Wind
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Improve default handler for warnings and errors on Windows
|
2574
|
tri
|
P2
|
All
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Inconsistent `module` in error reporting
|
2575
|
nor
|
P2
|
All
|
warmerdam@pobox.com
|
RESO
|
LATE
|
TIFFClientOpen leaks memory
|
2641
|
nor
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
runtime text relocations in libtiffxx.so.5.2.5
|
2654
|
cri
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Out-of-Bound read and write issue that can occur in function putgreytile()(tiff-4.0.7/libtiff/tif-getimage.c:1288) that called by tiffttopnm(netpbm 10.47.63).
|
2660
|
nor
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Unintended type replacement for private tags (e.g.: RichTIFFIPTC)
|
2661
|
enh
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Integer overflow in gtTileContig (tif_getimage.c)
|
2662
|
nor
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiffinfo - Heap out of bounds read in TIFFReadRawData()
|
2690
|
maj
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
libtiff: heap buffer overflow in bmp2tiff
|
2691
|
nor
|
P2
|
Free
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Freebsd 11.0 - Error: use of undeclared identifier 'JPEGState'
|
2694
|
nor
|
P2
|
All
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Out of Memory crash in Fax3SetupState()
|
2697
|
nor
|
P2
|
All
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Out of memory crash
|
2700
|
nor
|
P2
|
All
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiffinfo: Out of memory crash in TIFFReadContigStripData()
|
2701
|
nor
|
P2
|
All
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiffinfo: Out of memory crash in TIFFReadContigStripData()
|
2702
|
nor
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiff2pdf conversion not working on a multiple page file
|
2703
|
enh
|
P2
|
All
|
warmerdam@pobox.com
|
RESO
|
LATE
|
EXIF 2.31 Enhancement for LibTiff 4.0.7
|
2716
|
nor
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiff2pdf -d doesn't decompress g3-compressed TIFF
|
2717
|
nor
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiff2pdf doesn't deal with alpha layer properly
|
2718
|
maj
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
LibTiff tiff2pdf Stack Buffer Overflow Vulnerability
|
2722
|
enh
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Unable to create valid postscript with tiff2ps
|
2725
|
nor
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiff2pdf: huge memory allocation with input JPEG compressed file with huge stripbytecount
|
2729
|
nor
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
There is a Integer Overflow in function TIFFVStripSize64() in libtiff.
|
2732
|
enh
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
heap-buffer-overflow in tiffcp.c
|
2736
|
nor
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
problem with chroma sub-sampling in JPEG compression using sRGB colorspace
|
2745
|
maj
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Multiple out of bound write
|
2748
|
cri
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Error fetching directory count. (TIFFRewriteDirectory)
|
2749
|
enh
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
libtiff should not throw errors on TIFF/IT
|
2751
|
maj
|
P2
|
othe
|
warmerdam@pobox.com
|
RESO
|
LATE
|
TIFFFetchNormalTag should not assert for custom tags
|
2761
|
enh
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
NULL pointer dereference bug in libtiff(tiffcp)
|
2767
|
enh
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
A heap-buffer-overflow in libtiff 4.0.8.
|
2768
|
enh
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
There is a segment fault in t2p_write_pdf function tiff2pdf.c line 1585 in libtiff 4.0.7.
|
2771
|
enh
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Out Of Memory (71903560)
|
2774
|
enh
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
outdated TIFFTAG_*BYTECOUNTS and TIFFTAG_*OFFSETS description in man 3 TIFFGetField
|
2776
|
enh
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
SEGV in putCMYKseparate8bittile()
|
2777
|
enh
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
out of bounds write in tiffcrop / _TIFFFax3fillruns / Fax3Decode1D
|
2784
|
cri
|
P2
|
All
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Multiple heap-buffer-overflows in tiff-4.0.9 (PSDataColorContig)
|
2786
|
cri
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiff2pdf An error caused by an NULL pointer when usingtool in the latest libtiff4.0.9 (CVE-2018-10126)
|
2791
|
enh
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Heap buffer overflow in Fax3Decode1D
|
2792
|
enh
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Heap buffer overflow in pe_print_idataChopUpSingleUncompressedStrip
|
2793
|
enh
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Heap buffer overflow in PSDataColorContig
|
2794
|
enh
|
P2
|
Wind
|
warmerdam@pobox.com
|
RESO
|
LATE
|
SEGV occurred in Fax3PreDecode
|
2810
|
maj
|
P2
|
All
|
warmerdam@pobox.com
|
RESO
|
LATE
|
potential int32 overflow in multiply_ms() function
|
2811
|
enh
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
A null pointer deference in function _TIFFmemcmp at tif_unix.c:352 in libtiff4.0.9 (CVE-2018-17000)
|
2812
|
enh
|
P2
|
Wind
|
warmerdam@pobox.com
|
RESO
|
LATE
|
out-of-bound read vulnerability in function TIFFReadSeparateTileData and function TIFFReadContigTileData in tools/tiffinfoce.c
|
2813
|
enh
|
P2
|
Wind
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiffcp throws "Error, no space for image buffer" when copying large tiled BigTIFFs
|
2814
|
nor
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
4.0.9 Regression: fax2tiff: Empty input file
|
2815
|
enh
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Improve fax2tiff scriptability
|
2822
|
enh
|
P2
|
MacO
|
warmerdam@pobox.com
|
RESO
|
LATE
|
read error while using certain tiff
|
2823
|
enh
|
P2
|
MacO
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Error while reading directory count
|
2824
|
enh
|
P2
|
MacO
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiff-4.0.9 ./tools/tiff2ps can be drawn to a decode error with certain tif file.
|
2825
|
nor
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
SEGV at tif_dirwrite.c:1896 and tif_dirwrite.c:1901 in tiffcp
|
2828
|
nor
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiff2rgba: Fax3DecodeRLE() large loop + _TIFFReadEncodedTileAndAllocBuffer large allocation
|
2830
|
enh
|
P2
|
Wind
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Build problem contrib\iptcutil\iptcutil.c
|
2835
|
enh
|
P2
|
All
|
warmerdam@pobox.com
|
RESO
|
LATE
|
tiffcp heap-buffer-overflow in interceptor_strlen
|
2839
|
cri
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Divide by zero in raw2tiff.c
|
2843
|
enh
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Heap-buffer-overflow in tiffcp.c:800 tiffcp
|
2846
|
enh
|
P2
|
All
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Several functions implemented twice
|
2847
|
tri
|
P2
|
Wind
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Several functions implemented twice
|
2849
|
enh
|
P2
|
All
|
warmerdam@pobox.com
|
RESO
|
LATE
|
A heap out-of-bounds read in tiff2pdf (fwrite)
|
2850
|
nor
|
P2
|
All
|
warmerdam@pobox.com
|
RESO
|
LATE
|
use of allocated memory without null pointer check
|
2851
|
enh
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
there is a global-buffer-overflow in libtiff-4.0.10 in libtiff/tif_dir.c:1116
|
2852
|
maj
|
P2
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
There is a heap-buffer-overflow in libtiff 4.0.10 in tif_unix.c:346
|
2542
|
enh
|
P3
|
All
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Rationals with true DOUBLE precision for CUSTOM defined tags
|
2808
|
nor
|
P3
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
heap-buffer-overflow in tiff2pdf (CVE-2018-15209)
|
2809
|
nor
|
P3
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
heap-buffer-overflow in tiff2pdf (CVE-2018-16335)
|
2134
|
min
|
P4
|
All
|
warmerdam@pobox.com
|
RESO
|
LATE
|
TIFFClientOpen's mapproc's return value not clearly explained
|
2509
|
enh
|
P4
|
All
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Fix harmless unused variable warning
|
2258
|
cri
|
P5
|
All
|
warmerdam@pobox.com
|
RESO
|
LATE
|
TIFFPrintDirectory doesn't work properly for custom tags
|
2326
|
tri
|
P5
|
Linu
|
warmerdam@pobox.com
|
RESO
|
LATE
|
Link background is not specified, link text hard to read
|