Lucene search
SuseSUSE-SA:2004:038HistoryOct 22, 2004 - 2:52 p.m.
local privilege escalation in libtiff
2004-10-2214:52:41
lists.opensuse.org
13
0.932 High
EPSS
Percentile
98.8%
libtiff is used by image viewers and web browser to view “TIFF” images. These usually open and display those images without querying the user, making a normal system by default vulnerable to exploits of image library bugs.
Solution
There is no workaround. Update the libtiff packages.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| openSUSE | 9.0 | i586 | libtiff | < 3.5.7-376 | libtiff-3.5.7-376.i586.rpm |
| openSUSE | 8.2 | i586 | libtiff | < 3.5.7-376 | libtiff-3.5.7-376.i586.rpm |
| openSUSE | 8.1 | i586 | libtiff | < 3.5.7-376 | libtiff-3.5.7-376.i586.rpm |
| openSUSE | 9.1 | i586 | libtiff | < 3.6.1-38.12 | libtiff-3.6.1-38.12.i586.rpm |
Related
nessus
nessus
SUSE-SA:2004:038: libtiff
2004-10-22 00:00:00
RHEL 3 : freeradius (RHSA-2004:609)
2004-11-13 00:00:00
GLSA-200409-29 : FreeRADIUS: Multiple Denial of Service vulnerabilities
2004-09-23 00:00:00
openvas
openvas
SLES9: Security update for libtiff
2009-10-10 00:00:00
SLES9: Security update for libtiff
2009-10-10 00:00:00
Gentoo Security Advisory GLSA 200409-29 (FreeRADIUS)
2008-09-24 00:00:00
suse
suse
remote system compromise in xpdf, gpdf, kdegraphics3-pdf, pdftohtml, cups
2004-10-26 10:45:14
remote denial of service in kernel
2004-10-21 07:52:50
redhat
redhat
(RHSA-2004:609) freeradius security update
2004-11-12 00:00:00
(RHSA-2005:354) tetex security update
2005-04-01 00:00:00
(RHSA-2004:577) libtiff security update
2004-10-22 00:00:00
freebsd
freebsd
freeradius -- denial-of-service vulnerability
2004-09-20 00:00:00
xpdf -- integer overflow vulnerabilities
2004-10-21 00:00:00
tiff -- multiple integer overflows
2004-10-13 00:00:00
gentoo
gentoo
FreeRADIUS: Multiple Denial of Service vulnerabilities
2004-09-22 00:00:00
kfax: Multiple overflows in the included TIFF library
2004-12-19 00:00:00
PDFlib: Multiple overflows in the included TIFF library
2004-12-05 00:00:00
centos
centos
tetex security update
2005-04-01 21:29:55
kdegraphics security update
2005-04-12 16:01:20
kdegraphics security update
2005-04-12 23:05:10
securityvulns
securityvulns
[Full-Disclosure] [ GLSA 200412-02 ] PDFlib: Multiple overflows in the included TIFF library
2004-12-06 00:00:00
MDKSA-2004:111 - Updated wxGTK2 packages fix vulnerabilities
2004-10-22 00:00:00
KDE Security Advisory: kfax libtiff vulnerabilities
2004-12-10 00:00:00
cert
cert
LibTIFF vulnerable to denial-of-service condition
2004-12-01 00:00:00
LibTIFF contains multiple heap-based buffer overflows
2004-12-01 00:00:00
LibTIFF contains multiple integer overflows
2004-12-01 00:00:00
debian
debian
[SECURITY] [DSA 567-1] New libtiff packages fix remote code execution
2004-10-15 17:51:16
[SECURITY] [DSA 567-1] New libtiff packages fix remote code execution
2004-10-15 17:51:16
[SECURITY] [DSA 573-1] New cupsys packages fix arbitrary code execution
2004-10-21 14:18:22
osv
osv
tiff - heap overflows
2004-10-15 00:00:00
tetex-bin - integer overflows
2004-11-25 00:00:00
xpdf - integer overflows
2004-11-02 00:00:00
slackware
slackware
[slackware-security] libtiff
2004-11-01 08:00:50
ubuntucve
ubuntucve
cve
cve
debiancve
debiancve
ubuntu
ubuntu
xpdf vulnerabilities
2004-11-02 00:00:00
xpdf vulnerabilities
2004-10-23 00:00:00
tetex-bin vulnerabilities
2004-10-28 00:00:00
checkpoint_advisories
checkpoint_advisories
FreeRADIUS Illegal Attributes Denial of Service - ver 2 (CVE-2004-0938)
2014-05-08 00:00:00
FreeRADIUS Illegal Attributes Denial of Service (CVE-2004-0938)
2009-12-08 00:00:00
prion
prion
Integer overflow
2008-04-04 00:44:00