LibTIFF库tiff2rgba和rgb2ycbcr转换工具整数溢出漏洞

BUGTRAQ ID: 35652 CVECAN ID: CVE-2009-2347 LibTiff是负责对TIFF图象格式进行编码/解码的应用库。 libtiff软件把中捆绑了一些用于操控TIFF图形的工具集，其中tiff2rgba工具所使用的cvtwholeimage函数和 rgb2ycbcr工具所使用的tiffcvt函数没有正确地验证图形的宽度和高度，在使用宽度和高度值计算raster缓冲区大小时可能出现最终可导致堆溢出的整数溢出漏洞。如果用户受骗打开了畸形的TIFF图形就可以触发这个溢出，导致转换工具崩溃或执行任意代码。 LibTIFF LibTIFF 4.0 LibTIFF...

Mandriva Linux Security Advisory : libtiff (MDVSA-2009:150)

Multiple vulnerabilities has been found and corrected in libtiff : Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial of service crash via a crafted TIFF image, a different vulnerability than CVE-2008-2327 CVE-2009-2285. Fix...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : tiff vulnerability (USN-797-1)

It was discovered that the TIFF library did not correctly handle certain malformed TIFF images. If a user or automated system were tricked into processing a malicious image, a remote attacker could cause an application linked against libtiff to crash, leading to a denial of service. Note that...

LibTIFF TIFF Image Buffer Underflow Vulnerability

This host is installed with LibTIFF and is prone to buffer underflow vulnerability. OpenVAS Vulnerability Test $Id: gblibtiffbufvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ LibTIFF TIFF Image Buffer Underflow Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2009 Greenbone Networks GmbH,...

LibTIFF TIFF Image Buffer Underflow Vulnerability

LibTIFF is prone to buffer underflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-797-1: tiff vulnerability

It was discovered that the TIFF library did not correctly handle certain malformed TIFF images. If a user or automated system were tricked into processing a malicious image, a remote attacker could cause an application linked against libtiff to crash, leading to a denial of service...

Fedora Core 10 FEDORA-2009-7358 (libtiff)

The remote host is missing an update to libtiff announced via advisory FEDORA-2009-7358. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

Fedora Core 9 FEDORA-2009-7335 (libtiff)

The remote host is missing an update to libtiff announced via advisory FEDORA-2009-7335. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

Fedora Core 11 FEDORA-2009-7417 (libtiff)

The remote host is missing an update to libtiff announced via advisory FEDORA-2009-7417. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

Fedora Core 10 FEDORA-2009-7358 (libtiff)

The remote host is missing an update to libtiff announced via advisory FEDORA-2009-7358. OpenVAS Vulnerability Test $Id: fcore20097358.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7358 libtiff Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 9 FEDORA-2009-7335 (libtiff)

The remote host is missing an update to libtiff announced via advisory FEDORA-2009-7335. OpenVAS Vulnerability Test $Id: fcore20097335.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7335 libtiff Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 11 FEDORA-2009-7417 (libtiff)

The remote host is missing an update to libtiff announced via advisory FEDORA-2009-7417. OpenVAS Vulnerability Test $Id: fcore20097417.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7417 libtiff Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora 9 : libtiff-3.8.2-13.fc9 (2009-7335)

Fixes latest libtiff LZW decoding crash problem Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 10 : libtiff-3.8.2-13.fc10 (2009-7358)

Fixes latest libtiff LZW decoding crash problem Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 11 : libtiff-3.8.2-13.fc11 (2009-7417)

Fixes latest libtiff LZW decoding crash problem Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

[SECURITY] Fedora 11 Update: libtiff-3.8.2-13.fc11

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...

[SECURITY] Fedora 10 Update: libtiff-3.8.2-13.fc10

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...

[SECURITY] Fedora 9 Update: libtiff-3.8.2-13.fc9

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif extension and they are often quite large. The libtiff package should be installed if yo...

CVE-2009-2285

Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial of service crash via a crafted TIFF image, a different vulnerability than CVE-2008-2327...

DEBIAN-CVE-2009-2285

Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial of service crash via a crafted TIFF image, a different vulnerability than CVE-2008-2327...