Mandriva Linux Security Advisory : libtiff (MDVSA-2012:054)

A vulnerability has been found and corrected in libtiff : An integer overflow was discovered in the libtiff/tiffgetimage.c file in the tiff library which could cause execution of arbitrary code using a specially crafted TIFF image file CVE-2012-1173. The updated packages have been patched to...

[slackware-security] libtiff

New libtiff packages are available for Slackware 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/libtiff-3.9.6-i486-1slack13.37.txz: Upgraded. Patched overflows th...

CVE-2012-1173

Multiple integer overflows in tiffgetimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a TIFF file, which is not properly handled by the 1 gtTileSeparate or 2 gtStripSeparate function, leading to a heap-based buffer overflow...

LibTIFF TileSize Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of LibTIFF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the LibTIFF Library and...

SuSE 10 Security Update : libtiff (ZYPP Patch Number 7474)

The following bugs have been fixed : - Specially crafted files could cause a heap-based buffer overflows in the JPEG, Fax and Thunder decoders. CVE-2011-0191 / CVE-2011-0192 / CVE-2011-1167 - Directories with a large number of files could cause an integer overflow in the tiffdump tool...

ZDI-11-302 : Adobe Reader U3D TIFF Resource Buffer Overflow Remote Code Execution Vulnerability

ZDI-11-302 : Adobe Reader U3D TIFF Resource Buffer Overflow Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-302 October 26, 2011 -- CVE ID: CVE-2011-2432 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Adobe -- Affected Products: Adobe Reader -...

Adobe Reader U3D TIFF Resource Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within because Adobe...

Security fix for the ALT Linux 5 package libtiff version 3.9.5-alt1.M50P.1

Sept. 29, 2011 Gleb Fotengauer-Malinovskiy 3.9.5-alt1.M50P.1 - Backport to p5 branch CVE-2010-3087 CVE-2010-2595 CVE-2011-0192 CVE-2011-1167 - no libtiffxx subpackage...

CentOS Update for libtiff CESA-2010:0519 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for libtiff CESA-2011:0318 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for libtiff CESA-2009:1159 centos3 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for libtiff CESA-2009:1159 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for libtiff CESA-2011:0392 centos5 i386

Check for the Version of libtiff OpenVAS Vulnerability Test CentOS Update for libtiff CESA-2011:0392 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CentOS Update for libtiff CESA-2010:0519 centos5 i386

Check for the Version of libtiff OpenVAS Vulnerability Test CentOS Update for libtiff CESA-2010:0519 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CentOS Update for libtiff CESA-2011:0392 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for libtiff CESA-2011:0318 centos5 i386

Check for the Version of libtiff OpenVAS Vulnerability Test CentOS Update for libtiff CESA-2011:0318 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CentOS Update for libtiff CESA-2009:1159 centos3 i386

Check for the Version of libtiff OpenVAS Vulnerability Test CentOS Update for libtiff CESA-2009:1159 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CentOS Update for libtiff CESA-2009:1159 centos5 i386

Check for the Version of libtiff OpenVAS Vulnerability Test CentOS Update for libtiff CESA-2009:1159 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for mingw32-libtiff FEDORA-2011-5962

Check for the Version of mingw32-libtiff OpenVAS Vulnerability Test Fedora Update for mingw32-libtiff FEDORA-2011-5962 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

Fedora Update for mingw32-libtiff FEDORA-2011-5955

Check for the Version of mingw32-libtiff OpenVAS Vulnerability Test Fedora Update for mingw32-libtiff FEDORA-2011-5955 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...