Red Hat Security AdvisoryRHSA-2008:0863
libtiff security update
Released 2008-08-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 libtiff-3.5.7-31.el3, libtiff-3.5.7-31.el3.i386, libtiff-devel-3.5.7-31.el3 +1
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 libtiff-3.5.7-31.el2, libtiff-3.5.7-31.el2.i386, libtiff-3.5.7-31.el2.ia64 +2
- Red Hat Enterprise Linux AS version 3 libtiff-3.5.7-31.el3, libtiff-3.5.7-31.el3.i386, libtiff-3.5.7-31.el3.ia64 +5
- Red Hat Enterprise Linux ES version 2.1 libtiff-3.5.7-31.el2, libtiff-3.5.7-31.el2.i386, libtiff-devel-3.5.7-31.el2.i386
- Red Hat Enterprise Linux ES version 3 libtiff-3.5.7-31.el3, libtiff-3.5.7-31.el3.i386, libtiff-3.5.7-31.el3.ia64 +3
- Red Hat Enterprise Linux WS version 2.1 libtiff-3.5.7-31.el2, libtiff-3.5.7-31.el2.i386, libtiff-devel-3.5.7-31.el2.i386
- Red Hat Enterprise Linux WS version 3 libtiff-3.5.7-31.el3, libtiff-3.5.7-31.el3.i386, libtiff-3.5.7-31.el3.ia64 +3
- Red Hat Linux Advanced Workstation 2.1 libtiff-3.5.7-31.el2, libtiff-3.5.7-31.el2.ia64, libtiff-devel-3.5.7-31.el2.ia64
Fixes 1 record
Priority LOW 37
Multiple buffer underflows in the (1) LZWDecode, (2) LZWDecodeCompat, and (3) LZWDecodeVector functions in tif_lzw.c in the LZW decoder in LibTIFF 3.8.2 and earlier allow context-dependent attackers to execute arbitrary…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.0413 · Published 2008-08-27 · Fixed CWE-119
