Security fix for the ALT Linux 5 package libtiff version 3.8.2-alt2

Aug. 31, 2008 Dmitry V. Levin 3.8.2-alt2 - Applied patches from Drew Yao of Apple Product Security to fix potential buffer underflow in the LZW decoder CVE-2008-2327...

Security fix for the ALT Linux 10 package libtiff version 3.8.2-alt2

Aug. 31, 2008 Dmitry V. Levin 3.8.2-alt2 - Applied patches from Drew Yao of Apple Product Security to fix potential buffer underflow in the LZW decoder CVE-2008-2327...

libtiff security update

CentOS Errata and Security Advisory CESA-2008:0848 Updated libtiff packages that fix various security issues and a bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The libtiff packages conta...

RHEL 4 : libtiff (RHSA-2008:0848)

Updated libtiff packages that fix various security issues and a bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The libtiff packages contain a library of functions for manipulating Tagged...

RHEL 5 : libtiff (RHSA-2008:0847)

Updated libtiff packages that fix a security issue and a bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The libtiff packages contain a library of functions for manipulating Tagged Image Fi...

CentOS 3 : libtiff (CESA-2008:0863)

Updated libtiff packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having important security impact by the Red Hat Security Response Team. The libtiff packages contain a library of functions for manipulating Tagged Image File...

Important: Red Hat Security Advisory: libtiff security update

Updated libtiff packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having important security impact by the Red Hat Security Response Team. The libtiff packages contain a library of functions for manipulating Tagged Image File...

Important: Red Hat Security Advisory: libtiff security and bug fix update

Updated libtiff packages that fix a security issue and a bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The libtiff packages contain a library of functions for manipulating Tagged Image Fi...

libtiff security update

3.5.7-31.el3 - Fix some additional LZW decoding vulnerabilities back-port from tiff-3.6.1 Resolves: 458810 - Force debug symbols to be generated by adding GCOPTS=-g; the test used by this old configure script is too easily confused 3.5.7-25.el3.5 - Fix LZW decoding vulnerabilities CVE-2008-2327...

CVE-2008-2327

Multiple buffer underflows in the 1 LZWDecode, 2 LZWDecodeCompat, and 3 LZWDecodeVector functions in tiflzw.c in the LZW decoder in LibTIFF 3.8.2 and earlier allow context-dependent attackers to execute arbitrary code via a crafted TIFF file, related to improper handling of the CODECLEAR code...

CVE-2008-2327

CVE-2008-2327 affects LibTIFF 3.8.2 and earlier, with multiple buffer underflows in the LZW decoder (LZWDecode, LZWDecodeCompat, LZWDecodeVector) in tif_lzw.c that allow context-dependent attackers to execute arbitrary code via a crafted TIFF file due to improper handling of the CODE_CLEAR. Conne...

[SECURITY] [DSA 1632-1] New tiff packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1632-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst August 26, 2008 http://www.debian.org/security/faq -...

CVE-2007-2327

PHP remote file inclusion vulnerability in editor.php in HTMLeditbox 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the settingsappdir parameter...

CVE-2007-2327

CVE-2007-2327 affects HTMLeditbox 2.2. The vulnerability is a PHP remote file inclusion in _editor.php triggered by a URL in settings[app_dir], allowing remote code execution. Root cause is improper handling of the app_dir parameter enabling inclusion of attacker-controlled PHP. Exploitation deta...

CVE-2006-2327

CVE-2006-2327 describes multiple integer overflows in the DPRPC library (DPRPCNLM.NLM) within the NDPS/iPrint module of Novell Distributed Print Services on NetWare 6.5 SP3/SP4/SP5. An unauthenticated remote attacker could trigger overflows by sending an XDR-encoded array with a very large elemen...

CVE-2004-2327

CVE-2004-2327 affects Vizer Web Server 1.9.1. A remote attacker can cause a denial of service (server crash) by sending multiple malformed requests, including requests without GET, GET requests without HTTP, or excessively long GET requests. The CVSS/metrics indicate a network-exposed vector with...

CVE-2004-2327

Vizer Web Server 1.9.1 allows remote attackers to cause a denial of service crash via multiple malformed requests including 1 requests without GET, 2 GET requests without HTTP, 3 or long GET requests...

CVE-2005-2327

The CVE-2005-2327 entry describes a Cross-site scripting (XSS) vulnerability in the e107 content management system, affecting version 0.617 and earlier. The root cause is input handling that allows nested [url] BBCode tags to be processed in a way that enables remote injection of arbitrary script...

CVE-2004-2327

Vizer Web Server 1.9.1 allows remote attackers to cause a denial of service crash via multiple malformed requests including 1 requests without GET, 2 GET requests without HTTP, 3 or long GET requests...

CVE-2002-2327

Unspecified vulnerability in the environmental monitoring subsystem in Solaris 8 running on Sun Fire 280R, V480 and V880 allows local users to cause a denial of service by setting volatile properties...