Important: Red Hat Security Advisory: libtiff security and bug fix update

Updated libtiff packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

libtiff: heap-based buffer overflow in thunder decoder (ZDI-11-107)

Heap-based buffer overflow in the thunder aka ThunderScan decoder in tifthunder.c in LibTIFF 3.9.4 and earlier allows remote attackers to execute arbitrary code via crafted THUNDER2BITDELTAS data in a .tiff file that has an unexpected BitsPerSample value...

CVE-2011-1167

Heap-based buffer overflow in the thunder aka ThunderScan decoder in tifthunder.c in LibTIFF 3.9.4 and earlier allows remote attackers to execute arbitrary code via crafted THUNDER2BITDELTAS data in a .tiff file that has an unexpected BitsPerSample value...

CVE-2011-1167

Heap-based buffer overflow in the thunder aka ThunderScan decoder in tifthunder.c in LibTIFF 3.9.4 and earlier allows remote attackers to execute arbitrary code via crafted THUNDER2BITDELTAS data in a .tiff file that has an unexpected BitsPerSample value...

DEBIAN-CVE-2011-1167

Heap-based buffer overflow in the thunder aka ThunderScan decoder in tifthunder.c in LibTIFF 3.9.4 and earlier allows remote attackers to execute arbitrary code via crafted THUNDER2BITDELTAS data in a .tiff file that has an unexpected BitsPerSample value...

Heap overflow

Heap-based buffer overflow in the thunder aka ThunderScan decoder in tifthunder.c in LibTIFF 3.9.4 and earlier allows remote attackers to execute arbitrary code via crafted THUNDER2BITDELTAS data in a .tiff file that has an unexpected BitsPerSample value...

CVE-2011-1167

CVE-2011-1167 affects the libtiff library (TIFF handling) with a heap-based buffer overflow in the thunder/ThunderScan decoder (tif_thunder.c). A crafted THUNDER_2BITDELTAS data sequence in a .tiff file with an unexpected BitsPerSample value can allow remote code execution. Affected is LibTIFF 3....

CVE-2011-1167

Heap-based buffer overflow in the thunder aka ThunderScan decoder in tifthunder.c in LibTIFF 3.9.4 and earlier allows remote attackers to execute arbitrary code via crafted THUNDER2BITDELTAS data in a .tiff file that has an unexpected BitsPerSample value...

CVE-2011-1167

Heap-based buffer overflow in the thunder aka ThunderScan decoder in tifthunder.c in LibTIFF 3.9.4 and earlier allows remote attackers to execute arbitrary code via crafted THUNDER2BITDELTAS data in a .tiff file that has an unexpected BitsPerSample value...

libtiff security and bug fix update

3.9.4-1.el60.2 - Fix incorrect fix for CVE-2011-0192 Resolves: 688829 - Add fix for CVE-2011-1167 Resolves: 688742...

SuSE 10 Security Update : libtiff (ZYPP Patch Number 7376)

Two buffer overflow were fixed in libtiff : - vecyccrgbconvert/JPEGDecode: CVE-2011-0191 - Fax4Decode: CVE-2011-0192 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Buffer overflow in libtiff in Imagemagick

--Credits: zgmzgmatmail.ustc.edu.cn -- Disclosure Timeline: 3-17-2011 -- Affected Vendor: Imagemagick 6.6.8-5 Libtiff 6.9.4 -- Problem Description: A buffer overflow is triggered by displaying a malformed tiff image by the Imagemagick.The error information is followed: display: malformed.tif: Wro...

ZDI-11-107: Libtiff ThunderCode Decoder THUNDER_2BITDELTAS Remote Code Execution Vulnerability

ZDI-11-107: Libtiff ThunderCode Decoder THUNDER2BITDELTAS Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-107 March 21, 2011 -- CVE ID: CVE-2011-1167 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Libtiff -- Affected Products: Libtiff libtiff --...

Libtiff ThunderCode Decoder THUNDER_2BITDELTAS Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of libtiff. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementation of th...

SuSE 11.1 Security Update : libtiff (SAT Patch Number 4145)

Two buffer overflows were fixed in libtiff : - vecyccrgbconvert/JPEGDecode:. CVE-2011-0191 - Fax4Decode: CVE-2011-0192 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...

SuSE9 Security Update : libtiff (YOU Patch Number 12686)

Two buffer overflow have been fixed in libtiff which may be used by an attacker to execute code with the privileges of the user viewing a specially prepared TIFF image : - vecyccrgbconvert/JPEGDecode. CVE-2011-0191 - Fax4Decode. CVE-2011-0192 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. T...

Apple WebKit / Safari / iTunes / libtiff / Google Chrome multiple security vulnerabilities

Multiple vulnerabilities on PNG, TIFF, JPEG, XML parsing, multipe WebKit memory corruptions...

Mandriva Update for libtiff MDVSA-2011:043 (libtiff)

Check for the Version of libtiff OpenVAS Vulnerability Test Mandriva Update for libtiff MDVSA-2011:043 libtiff Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

About the security content of Safari 5.0.4

About the security content of Safari 5.0.4 Last Modified: March 09, 2011 Article: HT4566 Email this article Print this page Summary This document describes the security content of Safari 5.0.4. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until...

Fedora Update for libtiff FEDORA-2011-2540

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...