Vulnerabilities > Medium

DATE CVE VULNERABILITY TITLE RISK
2016-10-03 CVE-2016-1372 Improper Access Control vulnerability in multiple products
ClamAV (aka Clam AntiVirus) before 0.99.2 allows remote attackers to cause a denial of service (application crash) via a crafted 7z file.
4.3
2016-10-03 CVE-2016-1371 Improper Access Control vulnerability in multiple products
ClamAV (aka Clam AntiVirus) before 0.99.2 allows remote attackers to cause a denial of service (application crash) via a crafted mew packer executable.
4.3
2016-10-03 CVE-2016-7445 NULL Pointer Dereference vulnerability in multiple products
convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors involving the variable s.
network
low complexity
uclouvain opensuse CWE-476
5.0
2016-10-03 CVE-2016-3658 Out-of-bounds Read vulnerability in Libtiff
The TIFFWriteDirectoryTagLongLong8Array function in tif_dirwrite.c in the tiffset tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via vectors involving the ma variable.
network
low complexity
libtiff CWE-125
5.0
2016-10-03 CVE-2016-3634 Out-of-bounds Read vulnerability in Libtiff
The tagCompare function in tif_dirinfo.c in the thumbnail tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to field_tag matching.
network
low complexity
libtiff CWE-125
5.0
2016-10-03 CVE-2016-3633 Out-of-bounds Read vulnerability in Libtiff
The setrow function in the thumbnail tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the src variable.
network
low complexity
libtiff CWE-125
5.0
2016-10-03 CVE-2016-3631 Out-of-bounds Read vulnerability in Libtiff
The (1) cpStrips and (2) cpTiles functions in the thumbnail tool in LibTIFF 4.0.6 and earlier allow remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the bytecounts[] array variable.
network
low complexity
libtiff CWE-125
5.0
2016-10-03 CVE-2016-3625 Out-of-bounds Read vulnerability in Libtiff
tif_read.c in the tiff2bw tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TIFF image.
network
libtiff CWE-125
4.3
2016-10-03 CVE-2016-3624 Out-of-bounds Write vulnerability in Libtiff
The cvtClump function in the rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) by setting the "-v" option to -1.
network
low complexity
libtiff CWE-787
5.0
2016-10-03 CVE-2016-3623 Divide By Zero vulnerability in multiple products
The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero) by setting the (1) v or (2) h parameter to 0.
network
low complexity
libtiff opensuse CWE-369
5.0