SuSE 10 Security Update : libtiff (ZYPP Patch Number 1908)

This update of libtiff is the result of a source-code audit done by Tavis Ormandy. It fixes various bugs that can lead to denial-of-service conditions as well as to remote code execution while parsing a tiff image. CVE-2006-3459 / CVE-2006-3460 / CVE-2006-3461 / CVE-2006-3462 / CVE-2006-3463 /...

Solaris 5.9 (x86) : 125674-02

GNOME 2.0.2x86: SUNWTiff libtiff library patch. Date this patch was last updated by Sun : Aug/29/08 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

safari_libtiff.rb.txt

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' module Msf class...

mobilemail_libtiff.rb.txt

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' module Msf class...

Apple iPhones multiple security vulnerabilities

Vulnerable version of libtiff allows code execution and, as a result, allows to unlock phone...

openSUSE 10 Security Update : libtiff (libtiff-1907)

This update of libtiff is the result of a source-code audit done by Tavis Ormandy. It fixes various bugs that can lead to denial-of-service conditions as well as to remote code execution while parsing a tiff image. CVE-2006-3459, CVE-2006-3460, CVE-2006-3461, CVE-2006-3462, CVE-2006-3463,...

libtiff security update

3.5.7-25.el3.4 - Fix several vulnerabilities CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465...

Mandrake Linux Security Advisory : wxGTK2 (MDKSA-2004:111)

Several vulnerabilities have been discovered in the libtiff package; wxGTK2 uses a libtiff code tree, so it may have the same vulnerabilities : Chris Evans discovered several problems in the RLE run length encoding decoders that could lead to arbitrary code execution. CVE-2004-0803 Matthias Clase...

SUSE-SA:2006:044: libtiff

The remote host is missing the patch for the advisory SUSE-SA:2006:044 libtiff. This update of libtiff is the result of a source-code audit done by Tavis Ormandy, Google Security Team. It fixes various bugs that can lead to denial-of-service conditions as well as to remote code execution while...

Fedora Core 5 : libtiff-3.7.4-8 (2006-877)

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format files. Tavis Ormandy of Google discovered a number of flaws in libtiff during a security audit. An attacker could create a carefully crafted TIFF file in such a way that it was possible to cause an...

Fedora Core 4 : libtiff-3.7.1-6.fc4.2 (2006-591)

The tiffsplit command contained code that handled fixed-size buffers insecurely, possibly leading to stack overflows. This problem is fixed in the updated package. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...

Fedora Core 5 : libtiff-3.8.2-1.fc5 (2006-952)

Tue Sep 5 2006 Jindrich Novy - 3.8.2-1 - update to 3.8.2 - fix CVE-2006-2193, tiff2pdf buffer overflow 194362 - fix typo in man page for tiffset 186297 - use %?dist, fix Requires, BuildRoot - Mon Jul 24 2006 Matthias Clasen - Fix several vulnerabilities CVE-2006-3460 CVE-2006-3461 CVE-2006-3462...

Fedora Core 4 : libtiff-3.7.1-6.fc4.3 (2006-878)

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format files. Tavis Ormandy of Google discovered a number of flaws in libtiff during a security audit. An attacker could create a carefully crafted TIFF file in such a way that it was possible to cause an...

Fedora Core 5 : libtiff-3.7.4-6 (2006-592)

The tiffsplit command contained code that handled fixed-size buffers insecurely, possibly leading to stack overflows. This problem is fixed in the updated package. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...

Mandrake Linux Security Advisory : libtiff (MDKSA-2006:137)

Tavis Ormandy, Google Security Team, discovered several vulnerabilities the libtiff image processing library : Several buffer overflows have been discovered, including a stack buffer overflow via TIFFFetchShortPair in tifdirread.c, which is used to read two unsigned shorts from the input file...

LibTIFF多个过滤检查拒绝服务漏洞

Libtiff是一种TIFF规范的标准ANSI C实现库。 Libtiff多个算术运算不正确处理，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 问题存在于对范围的检查操作存在问题，可导致使用恶意值而绕过安全过滤检查，可造成客户端最后调用abort函数而产生拒绝服务攻击。 S.u.S.E. UnitedLinux 1.0 S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 10.0 S.u.S.E. Linux Professional 9.3 x8664 S.u.S.E. Linux Profession...

LibTIFF TiffFetchShortPair远程缓冲区溢出漏洞

Libtiff是一种TIFF规范的标准ANSI C实现库。 Libtiff包含的tifdirread.c存在多个堆栈溢出，远程攻击者可以利用漏洞以应用进程权限执行任意命令。 TIFFFetchShortPair用于从输入文件中读取两个无符号短整数，其通过CheckDirCount进行边界检查，但对tdircount数据缺少正确检查，可导致拒绝服务攻击，也可能以应用进程权限执行任意命令。 S.u.S.E. UnitedLinux 1.0 S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 10.0 S.u.S.E...

LibTIFF库匿名字段合并拒绝服务漏洞

Libtiff是一种TIFF规范的标准ANSI C实现库。 Libtiff处理定制标记存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 建立匿名字段在前，合并CODEC信息的字段可导致recognised字段出现不期望的值，这种状态可导致异常行为，导致应用程序崩溃或任意代码执行等问题。 S.u.S.E. UnitedLinux 1.0 S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 10.0 S.u.S.E. Linux Professional 9.3 x8664 S.u.S.E. Linux...

kdegraphics security update

7:3.3.1-3.9 - apply xpdf-splash-overflow-CVE-2006-0301-fix.diff to fix CVE-2006-0301 184307 7:3.3.1-3.8 - apply xpdf-splash-overflow-CVE-2006-0301-fix.diff to fix CVE-2006-0301 179055 7:3.3.1-3.7 - apply patch to fix buffer overflow issue in the xpdf codebase when handling splash images...

Solaris 10 (x86) : 119901-17 (deprecated)

GNOME 2.6.0x86: GNOME libtiff - library for reading and writing T. Date this patch was last updated by Sun : Sep/15/16 This plugin has been deprecated and either replaced with individual 119901 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...