Linux Distros Unpatched Vulnerability : CVE-2010-4665

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the ReadDirectory function in tiffdump.c in tiffdump in LibTIFF before 3.9.5 allows remote attackers to cause a denial of service applicatio...

Oracle: Security Advisory (ELSA-2010-0519)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2552-1 : tiff - several vulnerabilities

Several vulnerabilities were discovered in TIFF, a library set and tools to support the Tag Image File Format TIFF, allowing denial of service and potential privilege escalation. These vulnerabilities can be exploited via a specially crafted TIFF image. - CVE-2012-2113 The tiff2pdf utility has an...

Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : tiff vulnerabilities (USN-1416-1)

Alexander Gavrun discovered that the TIFF library incorrectly allocated space for a tile. If a user or automated system were tricked into opening a specially crafted TIFF image, a remote attacker could execute arbitrary code with user privileges, or crash the application, leading to a denial of...

SuSE 10 Security Update : libtiff (ZYPP Patch Number 7474)

The following bugs have been fixed : - Specially crafted files could cause a heap-based buffer overflows in the JPEG, Fax and Thunder decoders. CVE-2011-0191 / CVE-2011-0192 / CVE-2011-1167 - Directories with a large number of files could cause an integer overflow in the tiffdump tool...

openSUSE Security Update : libtiff-devel (openSUSE-SU-2011:0409-1)

Specially crafted tiff files could cause a heap-based buffer overflow in the thunder-decoder CVE-2011-1167. Directories with a large number of files could cause an integer overflow in the tiffdump tool CVE-2010-4665 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

CVE-2010-4665

The CVE-2010-4665 issue affects LibTIFF’s tiffdump utility (tiffdump.c ReadDirectory) where an integer overflow can be triggered by a crafted TIFF with many directory entries, leading to a potential denial of service (application crash). Affected product/version: LibTIFF before 3.9.5 (tiffdump an...

SuSE9 Security Update : libtiff (YOU Patch Number 12702)

The following bugs have been fixed : - Specially crafted tiff files could cause a heap-based buffer overflow in the thunder-decoder. CVE-2011-1167 - Directories with a large number of files could cause an integer overflow in the tiffdump tool. CVE-2010-4665 %NASLMINLEVEL 70300 C Tenable Network...

Fedora 14 : libtiff-3.9.5-1.fc14 (2011-5304)

Update to libtiff 3.9.5, incorporating all our previous patches plus other fixes, notably the fix for CVE-2009-5022 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format ...