[slackware-security] libtiff

New libtiff packages are available for Slackware 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix security issues. These issues could be used to crash programs linked to libtiff or possibly to execute code as the program's user. Thanks to Tavis Ormandy and the Google Security Team. More details...

CentOS 3 / 4 : libtiff (CESA-2006:0603)

Updated libtiff packages that fix several security flaws are now available for Red Hat Enterprise Linux. This update has been rated as having important security impact by the Red Hat Security Response Team. The libtiff package contains a library of functions for manipulating TIFF Tagged Image Fil...

GLSA-200608-07 : libTIFF: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200608-07 libTIFF: Multiple vulnerabilities Tavis Ormandy of the Google Security Team discovered several heap and stack-based buffer overflows and other flaws in libTIFF. The affected parts include the TIFFFetchShortPair,...

libTIFF: Multiple vulnerabilities

Background libTIFF provides support for reading and manipulating TIFF images. Description Tavis Ormandy of the Google Security Team discovered several heap and stack buffer overflows and other flaws in libTIFF. The affected parts include the TIFFFetchShortPair, TIFFScanLineSize and...

RHEL 2.1 / 3 / 4 : libtiff (RHSA-2006:0603)

Updated libtiff packages that fix several security flaws are now available for Red Hat Enterprise Linux. This update has been rated as having important security impact by the Red Hat Security Response Team. The libtiff package contains a library of functions for manipulating TIFF Tagged Image Fil...

libtiff security update

CentOS Errata and Security Advisory CESA-2006:0603-01 Updated libtiff packages that fix several security flaws are now available for Red Hat Enterprise Linux. This update has been rated as having important security impact by the Red Hat Security Response Team. The libtiff package contains a libra...

CVE-2006-3460

Heap-based buffer overflow in the JPEG decoder in the TIFF library libtiff before 3.8.2 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an encoded JPEG stream that is longer than the scan line size TiffScanLineSize...

DEBIAN-CVE-2006-3463

The EstimateStripByteCounts function in TIFF library libtiff before 3.8.2 uses a 16-bit unsigned short when iterating over an unsigned 32-bit value, which allows context-dependent attackers to cause a denial of service via a large tdnstrips value, which triggers an infinite loop...

DEBIAN-CVE-2006-3462

Heap-based buffer overflow in the NeXT RLE decoder in the TIFF library libtiff before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors involving decoding large RLE images...

CVE-2006-3465

Unspecified vulnerability in the custom tag support for the TIFF library libtiff before 3.8.2 allows remote attackers to cause a denial of service instability or crash and execute arbitrary code via unknown vectors...

CVE-2006-3462

Heap-based buffer overflow in the NeXT RLE decoder in the TIFF library libtiff before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors involving decoding large RLE images...

DEBIAN-CVE-2006-3459

Multiple stack-based buffer overflows in the TIFF library libtiff before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow context-dependent attackers to execute arbitrary code or cause a denial of service via unspecified vectors, including a large tdircount value in the...

DEBIAN-CVE-2006-3465

Unspecified vulnerability in the custom tag support for the TIFF library libtiff before 3.8.2 allows remote attackers to cause a denial of service instability or crash and execute arbitrary code via unknown vectors...

CVE-2006-3461

CVE-2006-3461 is a heap-based buffer overflow in the PixarLog decoder of libtiff, tracked in CVE-2006-3461. Affected component: libtiff prior to 3.8.2. Impact described: context-dependent attackers could potentially execute arbitrary code. Public references in connected sources corroborate that t...

CVE-2006-3462

The CVE-2006-3462 issue is a heap-based buffer overflow in the NeXT RLE decoder of libtiff (libtiff) prior to 3.8.2. It may allow context-dependent attackers to execute arbitrary code when decoding large RLE images. Connected documents confirm libtiff in affected packages and reference updates th...

CVE-2006-3463

CVE-2006-3463 affects libtiff up to version 3.8.2 where the EstimateStripByteCounts function uses a 16-bit unsigned short to iterate over a 32-bit value, enabling context-dependent attackers to cause a denial of service via an infinite loop. The connected Nessus/OpenVAS references corroborate lib...

CVE-2006-3461

Heap-based buffer overflow in the PixarLog decoder in the TIFF library libtiff before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors...

CVE-2006-3460

CVE-2006-3460 is a heap-based buffer overflow in the JPEG decoder of the TIFF library (libtiff) before 3.8.2. An encoded JPEG stream longer than the scan line size (TiffScanLineSize) can be exploited by a context-dependent attacker to cause a denial of service and possibly execute arbitrary code....

CVE-2006-3462

Heap-based buffer overflow in the NeXT RLE decoder in the TIFF library libtiff before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors involving decoding large RLE images...

CVE-2006-3459

The CVE-2006-3459 issue is a buffer overflow in the libtiff library (libtiff) prior to 3.8.2, used by Adobe Reader 9.3.0 and other products. The underlying flaw arises in TIFF parsing code (TIFFFetchShortPair in tif_dirread.c) when handling large tdir_count values, enabling context-dependent atta...