Fedora Core 5 : libtiff-3.7.4-8 (2006-877)

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format files. Tavis Ormandy of Google discovered a number of flaws in libtiff during a security audit. An attacker could create a carefully crafted TIFF file in such a way that it was possible to cause an...

Fedora Core 4 : libtiff-3.7.1-6.fc4.2 (2006-591)

The tiffsplit command contained code that handled fixed-size buffers insecurely, possibly leading to stack overflows. This problem is fixed in the updated package. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...

Fedora Core 5 : libtiff-3.8.2-1.fc5 (2006-952)

Tue Sep 5 2006 Jindrich Novy - 3.8.2-1 - update to 3.8.2 - fix CVE-2006-2193, tiff2pdf buffer overflow 194362 - fix typo in man page for tiffset 186297 - use %?dist, fix Requires, BuildRoot - Mon Jul 24 2006 Matthias Clasen - Fix several vulnerabilities CVE-2006-3460 CVE-2006-3461 CVE-2006-3462...

Fedora Core 4 : libtiff-3.7.1-6.fc4.3 (2006-878)

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format files. Tavis Ormandy of Google discovered a number of flaws in libtiff during a security audit. An attacker could create a carefully crafted TIFF file in such a way that it was possible to cause an...

Mandrake Linux Security Advisory : libtiff (MDKSA-2006:137)

Tavis Ormandy, Google Security Team, discovered several vulnerabilities the libtiff image processing library : Several buffer overflows have been discovered, including a stack buffer overflow via TIFFFetchShortPair in tifdirread.c, which is used to read two unsigned shorts from the input file...

LibTIFF多个过滤检查拒绝服务漏洞

Libtiff是一种TIFF规范的标准ANSI C实现库。 Libtiff多个算术运算不正确处理，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 问题存在于对范围的检查操作存在问题，可导致使用恶意值而绕过安全过滤检查，可造成客户端最后调用abort函数而产生拒绝服务攻击。 S.u.S.E. UnitedLinux 1.0 S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 10.0 S.u.S.E. Linux Professional 9.3 x8664 S.u.S.E. Linux Profession...

LibTIFF库匿名字段合并拒绝服务漏洞

Libtiff是一种TIFF规范的标准ANSI C实现库。 Libtiff处理定制标记存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 建立匿名字段在前，合并CODEC信息的字段可导致recognised字段出现不期望的值，这种状态可导致异常行为，导致应用程序崩溃或任意代码执行等问题。 S.u.S.E. UnitedLinux 1.0 S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 10.0 S.u.S.E. Linux Professional 9.3 x8664 S.u.S.E. Linux...

LibTIFF TiffFetchShortPair远程缓冲区溢出漏洞

Libtiff是一种TIFF规范的标准ANSI C实现库。 Libtiff包含的tifdirread.c存在多个堆栈溢出，远程攻击者可以利用漏洞以应用进程权限执行任意命令。 TIFFFetchShortPair用于从输入文件中读取两个无符号短整数，其通过CheckDirCount进行边界检查，但对tdircount数据缺少正确检查，可导致拒绝服务攻击，也可能以应用进程权限执行任意命令。 S.u.S.E. UnitedLinux 1.0 S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 10.0 S.u.S.E...

kdegraphics security update

7:3.3.1-3.9 - apply xpdf-splash-overflow-CVE-2006-0301-fix.diff to fix CVE-2006-0301 184307 7:3.3.1-3.8 - apply xpdf-splash-overflow-CVE-2006-0301-fix.diff to fix CVE-2006-0301 179055 7:3.3.1-3.7 - apply patch to fix buffer overflow issue in the xpdf codebase when handling splash images...

Solaris 10 (sparc) : 119900-18 (deprecated)

GNOME 2.6.0: GNOME libtiff - library for reading and writing TIFF. Date this patch was last updated by Sun : Sep/15/16 This plugin has been deprecated and either replaced with individual 119900 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...

Solaris 10 (x86) : 119901-17 (deprecated)

GNOME 2.6.0x86: GNOME libtiff - library for reading and writing T. Date this patch was last updated by Sun : Sep/15/16 This plugin has been deprecated and either replaced with individual 119901 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...

Libtiff图形库多个安全漏洞

LibTiff是负责对TIFF图象格式进行编码/解码的应用库。 TIFF库中存在多个安全漏洞，具体如下： CVE-2006-3459 多个栈溢出漏洞可能允许执行任意代码。 CVE-2006-3460 JPEG解码器中存在堆溢出漏洞。 CVE-2006-3461 PixarLog解码器中存在堆溢出漏洞。 CVE-2006-3462 NeXT RLE解码器中存在堆溢出漏洞。 CVE-2006-3463 循环中16位的无符短型用于迭代32位的无符值，因此循环不会终止，导致死循环。 CVE-2006-3464...

CVE-2006-4507

Technical details about CVE-2006-4507 are not provided in the connected documents. The initial description is non-specific; no affected product/version or root cause is disclosed here. Monitor for future updates/public disclosures.

[SA21672] Sony PSP TIFF Image Viewing Code Execution Vulnerability

TITLE: Sony PSP TIFF Image Viewing Code Execution Vulnerability SECUNIA ADVISORY ID: SA21672 VERIFY ADVISORY: http://secunia.com/advisories/21672/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote OPERATING SYSTEM: Sony PlayStation Portable PSP 2.x...

Multiple libtiff library vulnerabilities

Multiple buffer overflows on TIFF images parsing, endless loop, integer overflows, memory corruption...

RHEL 2.1 / 3 : kdegraphics (RHSA-2006:0648)

Updated kdegraphics packages that fix several security flaws in kfax are now available for Red Hat Enterprise Linux 2.1, and 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The kdegraphics package contains graphics applications for the K...

CentOS 3 : kdegraphics (CESA-2006:0648)

Updated kdegraphics packages that fix several security flaws in kfax are now available for Red Hat Enterprise Linux 2.1, and 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The kdegraphics package contains graphics applications for the K...

kdegraphics security update

CentOS Errata and Security Advisory CESA-2006:0648-01 Updated kdegraphics packages that fix several security flaws in kfax are now available for Red Hat Enterprise Linux 2.1, and 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The kdegraphic...

kdegraphics security update

CentOS Errata and Security Advisory CESA-2006:0648 Updated kdegraphics packages that fix several security flaws in kfax are now available for Red Hat Enterprise Linux 2.1, and 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The kdegraphics...

security flaw

Integer overflow in the TIFFFetchData function in tifdirread.c for libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted TIFF image...