libtiff security update

CentOS Errata and Security Advisory CESA-2010:0519 Updated libtiff packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System...

CVE-2010-2482

LibTIFF 3.9.4 and earlier does not properly handle an invalid tdstripbytecount field, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted TIFF file, a different vulnerability than CVE-2010-2443...

Out-of-bounds

The TIFFExtractData macro in LibTIFF before 3.9.4 does not properly handle unknown tag types in TIFF directory entries, which allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted TIFF file...

PT-2010-1128 · Libtiff +1 · Libtiff +1

Name of the Vulnerable Software and Affected Versions: LibTIFF versions 3.9.4 and earlier tiff versions prior to 4.0.2-r1 Description: The issue arises from improper handling of an invalid td stripbytecount field in crafted TIFF files, leading to a denial of service through a NULL pointer...

libtiff multiple security vulnerabilities

Multiple memory corruptions on tiff files parsing...

CVE-2010-1411

Multiple integer overflows in the Fax3SetupState function in tiffax3.c in the FAX3 decoder in LibTIFF before 3.9.3, as used in ImageIO in Apple Mac OS X 10.5.8 and Mac OS X 10.6 before 10.6.4, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a...

WebKit Security Flaws Haunt Apple iTunes

Apple has shipped a critical security patch for its iTunes media player to fix several gaping security holes that expose Windows users to hacker attacks. The vulnerabilities could be exploited to launch remote code execution attacks if a user simply opens an image file or surfs to a rigged Web...

Apple iTunes < 9.2 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes on the remote host is prior to version 9.2. It is, therefore, affected by multiple vulnerabilities : - A heap-based buffer overflow vulnerability exists in the handling of images with an embedded ColorSync profile. By using a specially crafted image, a remote attacker...

Apple iTunes < 9.2 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 9.2. As such, it may be affected by multiple vulnerabilities : - A heap-based buffer overflow in the handling of images with an embedded ColorSync profile may lead to an application crash or arbitrary code execution...

tiff -- buffer overflow vulnerability

Kevin Finisterre reports: Multiple integer overflows in the handling of TIFF files may result in a heap buffer overflow. Opening a maliciously crafted TIFF file may lead to an unexpected application termination or arbitrary code execution. The issues are addressed through improved bounds checking...

CentOS 5 : libtiff (CESA-2008:0847)

Updated libtiff packages that fix a security issue and a bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The libtiff packages contain a library of functions for manipulating Tagged Image Fi...

[SECURITY] [DSA 1912-2] New advi packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1912-2 [email protected] http://www.debian.org/security/ Steffen Joeris October 23, 2009 http://www.debian.org/security/faq -...

DSA-1912-2 advi - arbitrary code execution

Bulletin has no description...

DSA-1912-1 camlimages - arbitrary code execution

Bulletin has no description...

SuSE9 Security Update : CUPS (YOU Patch Number 12396)

The following bugs have been fixed : - Specially crafted tiff files could cause an integer overflow in the 'imagetops' filter. CVE-2009-0163 - Specially crafted pdf files could cause overflows in the 'pdftops' filter. CVE-2009-0165, CVE-2009-0166, CVE-2009-0146, CVE-2009-0147, CVE-2009-0799,...

SuSE 11 Security Update : CUPS (SAT Patch Number 790)

Specially crafted tiff files could cause an integer overflow in the 'imagetops' filter. CVE-2009-0163 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell,...

RedHat Security Advisory RHSA-2009:1159

The remote host is missing updates announced in advisory RHSA-2009:1159. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Several integer overflow flaws, leading to heap-based buffer overflows, were found in various libtiff color space...

CentOS 3 / 5 : libtiff (CESA-2009:1159)

Updated libtiff packages that fix several security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libtiff packages contain a library of functions for manipulating Tagged...

Moderate: Red Hat Security Advisory: libtiff security update

Updated libtiff packages that fix several security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libtiff packages contain a library of functions for manipulating Tagged...

Ubuntu USN-784-1 (imagemagick)

The remote host is missing an update to imagemagick announced via advisory USN-784-1. OpenVAS Vulnerability Test $Id: ubuntu7841.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7841.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-784-1 imagemagick Authors:...