7867 matches found
mobilemail_libtiff.rb.txt
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' module Msf class...
openSUSE 10 Security Update : libtiff (libtiff-1907)
This update of libtiff is the result of a source-code audit done by Tavis Ormandy. It fixes various bugs that can lead to denial-of-service conditions as well as to remote code execution while parsing a tiff image. CVE-2006-3459, CVE-2006-3460, CVE-2006-3461, CVE-2006-3462, CVE-2006-3463,...
libtiff security update
3.5.7-25.el3.4 - Fix several vulnerabilities CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465...
SUSE-SA:2006:044: libtiff
The remote host is missing the patch for the advisory SUSE-SA:2006:044 libtiff. This update of libtiff is the result of a source-code audit done by Tavis Ormandy, Google Security Team. It fixes various bugs that can lead to denial-of-service conditions as well as to remote code execution while...
Mandrake Linux Security Advisory : wxGTK2 (MDKSA-2004:111)
Several vulnerabilities have been discovered in the libtiff package; wxGTK2 uses a libtiff code tree, so it may have the same vulnerabilities : Chris Evans discovered several problems in the RLE run length encoding decoders that could lead to arbitrary code execution. CVE-2004-0803 Matthias Clase...
Fedora Core 5 : libtiff-3.7.4-6 (2006-592)
The tiffsplit command contained code that handled fixed-size buffers insecurely, possibly leading to stack overflows. This problem is fixed in the updated package. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...
Fedora Core 4 : libtiff-3.7.1-6.fc4.3 (2006-878)
The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format files. Tavis Ormandy of Google discovered a number of flaws in libtiff during a security audit. An attacker could create a carefully crafted TIFF file in such a way that it was possible to cause an...
Fedora Core 4 : libtiff-3.7.1-6.fc4.2 (2006-591)
The tiffsplit command contained code that handled fixed-size buffers insecurely, possibly leading to stack overflows. This problem is fixed in the updated package. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...
Fedora Core 5 : libtiff-3.7.4-8 (2006-877)
The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format files. Tavis Ormandy of Google discovered a number of flaws in libtiff during a security audit. An attacker could create a carefully crafted TIFF file in such a way that it was possible to cause an...
Fedora Core 5 : libtiff-3.8.2-1.fc5 (2006-952)
Tue Sep 5 2006 Jindrich Novy - 3.8.2-1 - update to 3.8.2 - fix CVE-2006-2193, tiff2pdf buffer overflow 194362 - fix typo in man page for tiffset 186297 - use %?dist, fix Requires, BuildRoot - Mon Jul 24 2006 Matthias Clasen - Fix several vulnerabilities CVE-2006-3460 CVE-2006-3461 CVE-2006-3462...
Mandrake Linux Security Advisory : libtiff (MDKSA-2006:137)
Tavis Ormandy, Google Security Team, discovered several vulnerabilities the libtiff image processing library : Several buffer overflows have been discovered, including a stack buffer overflow via TIFFFetchShortPair in tifdirread.c, which is used to read two unsigned shorts from the input file...
LibTIFF多个过滤检查拒绝服务漏洞
Libtiff是一种TIFF规范的标准ANSI C实现库。 Libtiff多个算术运算不正确处理，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 问题存在于对范围的检查操作存在问题，可导致使用恶意值而绕过安全过滤检查，可造成客户端最后调用abort函数而产生拒绝服务攻击。 S.u.S.E. UnitedLinux 1.0 S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 10.0 S.u.S.E. Linux Professional 9.3 x8664 S.u.S.E. Linux Profession...
LibTIFF库匿名字段合并拒绝服务漏洞
Libtiff是一种TIFF规范的标准ANSI C实现库。 Libtiff处理定制标记存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 建立匿名字段在前，合并CODEC信息的字段可导致recognised字段出现不期望的值，这种状态可导致异常行为，导致应用程序崩溃或任意代码执行等问题。 S.u.S.E. UnitedLinux 1.0 S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 10.0 S.u.S.E. Linux Professional 9.3 x8664 S.u.S.E. Linux...
LibTIFF TiffFetchShortPair远程缓冲区溢出漏洞
Libtiff是一种TIFF规范的标准ANSI C实现库。 Libtiff包含的tifdirread.c存在多个堆栈溢出，远程攻击者可以利用漏洞以应用进程权限执行任意命令。 TIFFFetchShortPair用于从输入文件中读取两个无符号短整数，其通过CheckDirCount进行边界检查，但对tdircount数据缺少正确检查，可导致拒绝服务攻击，也可能以应用进程权限执行任意命令。 S.u.S.E. UnitedLinux 1.0 S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 10.0 S.u.S.E...
kdegraphics security update
7:3.3.1-3.9 - apply xpdf-splash-overflow-CVE-2006-0301-fix.diff to fix CVE-2006-0301 184307 7:3.3.1-3.8 - apply xpdf-splash-overflow-CVE-2006-0301-fix.diff to fix CVE-2006-0301 179055 7:3.3.1-3.7 - apply patch to fix buffer overflow issue in the xpdf codebase when handling splash images...
Solaris 10 (x86) : 119901-17 (deprecated)
GNOME 2.6.0x86: GNOME libtiff - library for reading and writing T. Date this patch was last updated by Sun : Sep/15/16 This plugin has been deprecated and either replaced with individual 119901 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...
Solaris 10 (sparc) : 119900-18 (deprecated)
GNOME 2.6.0: GNOME libtiff - library for reading and writing TIFF. Date this patch was last updated by Sun : Sep/15/16 This plugin has been deprecated and either replaced with individual 119900 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...
Libtiff图形库多个安全漏洞
LibTiff是负责对TIFF图象格式进行编码/解码的应用库。 TIFF库中存在多个安全漏洞，具体如下： CVE-2006-3459 多个栈溢出漏洞可能允许执行任意代码。 CVE-2006-3460 JPEG解码器中存在堆溢出漏洞。 CVE-2006-3461 PixarLog解码器中存在堆溢出漏洞。 CVE-2006-3462 NeXT RLE解码器中存在堆溢出漏洞。 CVE-2006-3463 循环中16位的无符短型用于迭代32位的无符值，因此循环不会终止，导致死循环。 CVE-2006-3464...
CVE-2006-4507
Technical details about CVE-2006-4507 are not provided in the connected documents. The initial description is non-specific; no affected product/version or root cause is disclosed here. Monitor for future updates/public disclosures.
