RHEL 2.1 / 3 / 4 : libtiff (RHSA-2006:0603)

Updated libtiff packages that fix several security flaws are now available for Red Hat Enterprise Linux. This update has been rated as having important security impact by the Red Hat Security Response Team. The libtiff package contains a library of functions for manipulating TIFF Tagged Image Fil...

libtiff security update

CentOS Errata and Security Advisory CESA-2006:0603-01 Updated libtiff packages that fix several security flaws are now available for Red Hat Enterprise Linux. This update has been rated as having important security impact by the Red Hat Security Response Team. The libtiff package contains a libra...

DEBIAN-CVE-2006-3459

Multiple stack-based buffer overflows in the TIFF library libtiff before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow context-dependent attackers to execute arbitrary code or cause a denial of service via unspecified vectors, including a large tdircount value in the...

CVE-2006-3462

Heap-based buffer overflow in the NeXT RLE decoder in the TIFF library libtiff before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors involving decoding large RLE images...

DEBIAN-CVE-2006-3462

Heap-based buffer overflow in the NeXT RLE decoder in the TIFF library libtiff before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors involving decoding large RLE images...

CVE-2006-3460

Heap-based buffer overflow in the JPEG decoder in the TIFF library libtiff before 3.8.2 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an encoded JPEG stream that is longer than the scan line size TiffScanLineSize...

DEBIAN-CVE-2006-3463

The EstimateStripByteCounts function in TIFF library libtiff before 3.8.2 uses a 16-bit unsigned short when iterating over an unsigned 32-bit value, which allows context-dependent attackers to cause a denial of service via a large tdnstrips value, which triggers an infinite loop...

CVE-2006-3465

Unspecified vulnerability in the custom tag support for the TIFF library libtiff before 3.8.2 allows remote attackers to cause a denial of service instability or crash and execute arbitrary code via unknown vectors...

DEBIAN-CVE-2006-3465

Unspecified vulnerability in the custom tag support for the TIFF library libtiff before 3.8.2 allows remote attackers to cause a denial of service instability or crash and execute arbitrary code via unknown vectors...

CVE-2006-3461

CVE-2006-3461 is a heap-based buffer overflow in the PixarLog decoder of libtiff, tracked in CVE-2006-3461. Affected component: libtiff prior to 3.8.2. Impact described: context-dependent attackers could potentially execute arbitrary code. Public references in connected sources corroborate that t...

CVE-2006-3460

CVE-2006-3460 is a heap-based buffer overflow in the JPEG decoder of the TIFF library (libtiff) before 3.8.2. An encoded JPEG stream longer than the scan line size (TiffScanLineSize) can be exploited by a context-dependent attacker to cause a denial of service and possibly execute arbitrary code....

CVE-2006-3459

The CVE-2006-3459 issue is a buffer overflow in the libtiff library (libtiff) prior to 3.8.2, used by Adobe Reader 9.3.0 and other products. The underlying flaw arises in TIFF parsing code (TIFFFetchShortPair in tif_dirread.c) when handling large tdir_count values, enabling context-dependent atta...

CVE-2006-3461

Heap-based buffer overflow in the PixarLog decoder in the TIFF library libtiff before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors...

CVE-2006-3462

Heap-based buffer overflow in the NeXT RLE decoder in the TIFF library libtiff before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors involving decoding large RLE images...

CVE-2006-3462

The CVE-2006-3462 issue is a heap-based buffer overflow in the NeXT RLE decoder of libtiff (libtiff) prior to 3.8.2. It may allow context-dependent attackers to execute arbitrary code when decoding large RLE images. Connected documents confirm libtiff in affected packages and reference updates th...

CVE-2006-3464

CVE-2006-3464 affects the TIFF library (libtiff) up to version 3.8.1; the issue arises from large offset values in a TIFF directory causing an integer overflow and triggering unchecked arithmetic operations. This can lead to context-dependent attackers potentially executing code or causing a cras...

CVE-2006-3463

CVE-2006-3463 affects libtiff up to version 3.8.2 where the EstimateStripByteCounts function uses a 16-bit unsigned short to iterate over a 32-bit value, enabling context-dependent attackers to cause a denial of service via an infinite loop. The connected Nessus/OpenVAS references corroborate lib...

CVE-2006-3460

Heap-based buffer overflow in the JPEG decoder in the TIFF library libtiff before 3.8.2 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an encoded JPEG stream that is longer than the scan line size TiffScanLineSize...

CVE-2006-3464

TIFF library libtiff before 3.8.2 allows context-dependent attackers to pass numeric range checks and possibly execute code, and trigger assert errors, via large offset values in a TIFF directory that lead to an integer overflow and other unspecified vectors involving "unchecked arithmetic...

CVE-2006-3465

The CVE-2006-3465 entry concerns libtiff (TIFF library) before version 3.8.2. Connected advisories and Nessus/OpenVAS entries confirm a family of libtiff issues that enable denial of service and potential arbitrary code execution via crafted TIFF data, with multiple CVEs (e.g., 2006-3459 through ...