Oracle Linux 3 : libtiff (ELSA-2006-0603)

From Red Hat Security Advisory 2006:0603 : Updated libtiff packages that fix several security flaws are now available for Red Hat Enterprise Linux. This update has been rated as having important security impact by the Red Hat Security Response Team. The libtiff package contains a library of...

SLES9: Security update for libtiff

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libtiff For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5020045 within the SuS...

SLES9: Security update for libtiff

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libtiff For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5020045 within the SuS...

Gentoo Security Advisory GLSA 200608-07 (tiff)

The remote host is missing updates announced in advisory GLSA 200608-07. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

openSUSE 10 Security Update : libtiff (libtiff-1907)

This update of libtiff is the result of a source-code audit done by Tavis Ormandy. It fixes various bugs that can lead to denial-of-service conditions as well as to remote code execution while parsing a tiff image. CVE-2006-3459, CVE-2006-3460, CVE-2006-3461, CVE-2006-3462, CVE-2006-3463,...

Fedora Core 5 : libtiff-3.7.4-8 (2006-877)

The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format files. Tavis Ormandy of Google discovered a number of flaws in libtiff during a security audit. An attacker could create a carefully crafted TIFF file in such a way that it was possible to cause an...

CVE-2006-3464

TIFF library libtiff before 3.8.2 allows context-dependent attackers to pass numeric range checks and possibly execute code, and trigger assert errors, via large offset values in a TIFF directory that lead to an integer overflow and other unspecified vectors involving "unchecked arithmetic...

CVE-2006-3464

CVE-2006-3464 affects the TIFF library (libtiff) up to version 3.8.1; the issue arises from large offset values in a TIFF directory causing an integer overflow and triggering unchecked arithmetic operations. This can lead to context-dependent attackers potentially executing code or causing a cras...