Red Hat Security AdvisoryRHSA-2006:0425
libtiff security update
Released 2006-05-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 libtiff-3.5.7-25.el3.1, libtiff-3.5.7-25.el3.1.i386, libtiff-devel-3.5.7-25.el3.1 +1
- Red Hat Enterprise Linux AS version 3 libtiff-3.5.7-25.el3.1, libtiff-3.5.7-25.el3.1.i386, libtiff-3.5.7-25.el3.1.ia64 +5
- Red Hat Enterprise Linux AS version 4 libtiff-3.6.1-10, libtiff-3.6.1-10.i386, libtiff-3.6.1-10.ia64 +5
- Red Hat Enterprise Linux Desktop version 4 libtiff-3.6.1-10, libtiff-3.6.1-10.i386, libtiff-devel-3.6.1-10 +1
- Red Hat Enterprise Linux ES version 3 libtiff-3.5.7-25.el3.1, libtiff-3.5.7-25.el3.1.i386, libtiff-3.5.7-25.el3.1.ia64 +3
- Red Hat Enterprise Linux ES version 4 libtiff-3.6.1-10, libtiff-3.6.1-10.i386, libtiff-3.6.1-10.ia64 +3
- Red Hat Enterprise Linux WS version 3 libtiff-3.5.7-25.el3.1, libtiff-3.5.7-25.el3.1.i386, libtiff-3.5.7-25.el3.1.ia64 +3
- Red Hat Enterprise Linux WS version 4 libtiff-3.6.1-10, libtiff-3.6.1-10.i386, libtiff-3.6.1-10.ia64 +3
Fixes 4 records
Priority MEDIUM 42
Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted TIFF image.
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.10767 · Published 2006-04-25 · Fixed
Priority MEDIUM 41
Double free vulnerability in tif_jpeg.c in libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image that triggers errors re…
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.10048 · Published 2006-04-25 · Fixed CWE-119
Priority LOW 30
Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a TIFF image that triggers errors in (1) the TIFFFetchAnyArray function in (a) tif_dirread.c; (2) certai…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.08851 · Published 2006-04-25 · Fixed
Priority LOW 13
The TIFFToRGB function in libtiff before 3.8.1 allows remote attackers to cause a denial of service (crash) via a crafted TIFF image with Yr/Yg/Yb values that exceed the YCR/YCG/YCB values, which triggers an out-of-bound…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00818 · Published 2006-05-01 · Fixed
THREATIST.IORead the docs