Gentoo Security Advisory GLSA 200710-06 (openssl)

The remote host is missing updates announced in advisory GLSA 200710-06. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-200809-07 : libTIFF: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200809-07 libTIFF: User-assisted execution of arbitrary code Drew Yao Apple Product Security and Clay Wood reported multiple buffer underflows in the LZWDecode and LZWDecodeCompat functions in tiflzw.c when processing TIFF files...

SuSE 10 Security Update : libtiff (ZYPP Patch Number 5538)

A buffer underflow CVE-2008-2327 has been fixed in libtiff. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid34074; scriptversion"1.20";...

openSUSE 10 Security Update : libtiff (libtiff-5540)

A buffer underflow CVE-2008-2327 has been fixed in libtiff. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libtiff-5540. The text description of this plugin is C SUSE LLC...

Security fix for the ALT Linux 5 package libtiff version 3.8.2-alt2

Aug. 31, 2008 Dmitry V. Levin 3.8.2-alt2 - Applied patches from Drew Yao of Apple Product Security to fix potential buffer underflow in the LZW decoder CVE-2008-2327...

Security fix for the ALT Linux 10 package libtiff version 3.8.2-alt2

Aug. 31, 2008 Dmitry V. Levin 3.8.2-alt2 - Applied patches from Drew Yao of Apple Product Security to fix potential buffer underflow in the LZW decoder CVE-2008-2327...

CVE-2008-2327

Multiple buffer underflows in the 1 LZWDecode, 2 LZWDecodeCompat, and 3 LZWDecodeVector functions in tiflzw.c in the LZW decoder in LibTIFF 3.8.2 and earlier allow context-dependent attackers to execute arbitrary code via a crafted TIFF file, related to improper handling of the CODECLEAR code...

Buffer overflow

Multiple buffer underflows in the 1 LZWDecode, 2 LZWDecodeCompat, and 3 LZWDecodeVector functions in tiflzw.c in the LZW decoder in LibTIFF 3.8.2 and earlier allow context-dependent attackers to execute arbitrary code via a crafted TIFF file, related to improper handling of the CODECLEAR code...

CVE-2008-2327

CVE-2008-2327 affects LibTIFF 3.8.2 and earlier, with multiple buffer underflows in the LZW decoder (LZWDecode, LZWDecodeCompat, LZWDecodeVector) in tif_lzw.c that allow context-dependent attackers to execute arbitrary code via a crafted TIFF file due to improper handling of the CODE_CLEAR. Conne...

LibTIFF 'tif_lzw.c'远程整数下溢漏洞

BUGTRAQ ID:30832 CVE ID：CVE-2008-2327 CNCVE ID：CNCVE-20082327 LibTiff是一款负责对TIFF图象格式进行编码/解码的应用库。 LibTIFF 'tiflzw.c'存在整数下溢问题，远程攻击者可以利用漏洞以链接此库的应用程序权限执行任意指令。 libtiff/tiflzw.c代码中的"LZWDecode"和"LZWDecodeCompat"函数存在错误，通过构建特殊的TIFF文件，诱使用户访问，可触发缓冲区下溢，导致以链接此库的应用程序权限执行任意指令。 LibTIFF LibTIFF 3.8.2 + Debian Linu...

Debian DSA-1632-1 : tiff - buffer underflow

Drew Yao discovered that libTIFF, a library for handling the Tagged Image File Format, is vulnerable to a programming error allowing malformed tiff files to lead to a crash or execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

[SECURITY] [DSA 1632-1] New tiff packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1632-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst August 26, 2008 http://www.debian.org/security/faq -...

DTSA-160-1 tiff - buffer underflow

Bulletin has no description...

CVE-2008-3175

Integer underflow in rxRPC.dll in the LGServer service in the server in CA ARCserve Backup for Laptops and Desktops 11.0 through 11.5 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted message that triggers a buffer overflow...

CVE-2008-3175

Integer underflow in rxRPC.dll in the LGServer service in the server in CA ARCserve Backup for Laptops and Desktops 11.0 through 11.5 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted message that triggers a buffer overflow...

CentOS 3 : rdesktop (CESA-2008:0576)

Updated rdesktop packages that fix a security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. rdesktop is an open source client for Microsoft Windows NT Terminal Server and Microsoft...

RHEL 4 : rdesktop (RHSA-2008:0725)

Updated rdesktop packages that fix a security issue and a bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. rdesktop is an open source client for Microsoft Windows NT Terminal Server and...

RHEL 3 : rdesktop (RHSA-2008:0576)

Updated rdesktop packages that fix a security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. rdesktop is an open source client for Microsoft Windows NT Terminal Server and Microsoft...

RHEL 5 : rdesktop (RHSA-2008:0575)

An updated rdesktop package that fixes a security issue is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. rdesktop is an open source client for Microsoft Windows NT Terminal Server and Microsoft...

rdesktop security update

CentOS Errata and Security Advisory CESA-2008:0576 Updated rdesktop packages that fix a security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. rdesktop is an open source client for...