tiff vulnerability

2011-04-2100:00:00

ubuntu.com

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

Low

0.268 Low

EPSS

Percentile

96.8%

JSON

Releases

Ubuntu 10.10
Ubuntu 10.04

Packages

tiff - TIFF manipulation and conversion tools

Details

It was discovered that the TIFF library incorrectly handled certain JPEG
data. If a user or automated system were tricked into opening a specially
crafted TIFF image, a remote attacker could execute arbitrary code with
user privileges, or crash the application, leading to a denial of service.

OSVersionArchitecturePackageVersionFilename
Ubuntu10.10noarchlibtiff4< 3.9.4-2ubuntu0.4UNKNOWN
Ubuntu10.10noarchlibtiff-opengl< 3.9.4-2ubuntu0.4UNKNOWN
Ubuntu10.10noarchlibtiff-tools< 3.9.4-2ubuntu0.4UNKNOWN
Ubuntu10.10noarchlibtiff4-dev< 3.9.4-2ubuntu0.4UNKNOWN
Ubuntu10.10noarchlibtiffxx0c2< 3.9.4-2ubuntu0.4UNKNOWN
Ubuntu10.04noarchlibtiff4< 3.9.2-2ubuntu0.7UNKNOWN
Ubuntu10.04noarchlibtiff-opengl< 3.9.2-2ubuntu0.7UNKNOWN
Ubuntu10.04noarchlibtiff-tools< 3.9.2-2ubuntu0.7UNKNOWN
Ubuntu10.04noarchlibtiff4-dev< 3.9.2-2ubuntu0.7UNKNOWN
Ubuntu10.04noarchlibtiffxx0c2< 3.9.2-2ubuntu0.7UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	10.10	noarch	libtiff4	< 3.9.4-2ubuntu0.4	UNKNOWN
Ubuntu	10.10	noarch	libtiff-opengl	< 3.9.4-2ubuntu0.4	UNKNOWN
Ubuntu	10.10	noarch	libtiff-tools	< 3.9.4-2ubuntu0.4	UNKNOWN
Ubuntu	10.10	noarch	libtiff4-dev	< 3.9.4-2ubuntu0.4	UNKNOWN
Ubuntu	10.10	noarch	libtiffxx0c2	< 3.9.4-2ubuntu0.4	UNKNOWN
Ubuntu	10.04	noarch	libtiff4	< 3.9.2-2ubuntu0.7	UNKNOWN
Ubuntu	10.04	noarch	libtiff-opengl	< 3.9.2-2ubuntu0.7	UNKNOWN
Ubuntu	10.04	noarch	libtiff-tools	< 3.9.2-2ubuntu0.7	UNKNOWN
Ubuntu	10.04	noarch	libtiff4-dev	< 3.9.2-2ubuntu0.7	UNKNOWN
Ubuntu	10.04	noarch	libtiffxx0c2	< 3.9.2-2ubuntu0.7	UNKNOWN