Red Hat Security AdvisoryRHSA-2008:0847
libtiff security and bug fix update
Released 2008-08-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) libtiff-3.8.2-7.el5_2.2, libtiff-3.8.2-7.el5_2.2.i386, libtiff-3.8.2-7.el5_2.2.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) libtiff-3.8.2-7.el5_2.2, libtiff-3.8.2-7.el5_2.2.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) libtiff-3.8.2-7.el5_2.2, libtiff-devel-3.8.2-7.el5_2.2, libtiff-devel-3.8.2-7.el5_2.2.i386
Fixes 1 record
Priority LOW 37
Multiple buffer underflows in the (1) LZWDecode, (2) LZWDecodeCompat, and (3) LZWDecodeVector functions in tif_lzw.c in the LZW decoder in LibTIFF 3.8.2 and earlier allow context-dependent attackers to execute arbitrary…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.0413 · Published 2008-08-27 · Fixed CWE-119
