Red Hat Security AdvisoryRHSA-2010:0519
libtiff security update
Released 2010-07-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) libtiff-3.8.2-7.el5_5.5, libtiff-3.8.2-7.el5_5.5.i386, libtiff-3.8.2-7.el5_5.5.ia64 +5
- Red Hat Enterprise Linux AS version 4 libtiff-3.6.1-12.el4_8.5, libtiff-3.6.1-12.el4_8.5.i386, libtiff-3.6.1-12.el4_8.5.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) libtiff-3.8.2-7.el5_5.5, libtiff-3.8.2-7.el5_5.5.i386, libtiff-devel-3.8.2-7.el5_5.5.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) libtiff-3.8.2-7.el5_5.5, libtiff-devel-3.8.2-7.el5_5.5, libtiff-devel-3.8.2-7.el5_5.5.i386
- Red Hat Enterprise Linux Desktop version 4 libtiff-3.6.1-12.el4_8.5, libtiff-3.6.1-12.el4_8.5.i386, libtiff-devel-3.6.1-12.el4_8.5 +1
- Red Hat Enterprise Linux ES version 4 libtiff-3.6.1-12.el4_8.5, libtiff-3.6.1-12.el4_8.5.i386, libtiff-3.6.1-12.el4_8.5.ia64 +3
- Red Hat Enterprise Linux WS version 4 libtiff-3.6.1-12.el4_8.5, libtiff-3.6.1-12.el4_8.5.i386, libtiff-3.6.1-12.el4_8.5.ia64 +3
Fixes 6 records
Priority MEDIUM 44
Multiple integer overflows in the Fax3SetupState function in tif_fax3.c in the FAX3 decoder in LibTIFF before 3.9.3, as used in ImageIO in Apple Mac OS X 10.5.8 and Mac OS X 10.6 before 10.6.4, allow remote attackers to…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.12854 · Published 2010-06-17 · Fixed CWE-189
Priority LOW 25
Integer overflow in the ReadDirectory function in tiffdump.c in tiffdump in LibTIFF before 3.9.5 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a cr…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02621 · Published 2011-05-03 · Partial fix CWE-189
Priority LOW 25
The TIFFVStripSize function in tif_strip.c in LibTIFF 3.9.0 and 3.9.2 makes incorrect calls to the TIFFGetField function, which allows remote attackers to cause a denial of service (application crash) via a crafted TIFF…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02785 · Published 2010-07-01 · Fixed CWE-20
Priority LOW 25
The TIFFYCbCrtoRGB function in LibTIFF 3.9.0 and 3.9.2, as used in ImageMagick, does not properly handle invalid ReferenceBlackWhite values, which allows remote attackers to cause a denial of service (application crash)…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02754 · Published 2010-07-01 · Partial fix CWE-20
Priority LOW 25
The TIFFExtractData macro in LibTIFF before 3.9.4 does not properly handle unknown tag types in TIFF directory entries, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02954 · Published 2010-07-06 · Fixed CWE-119
Priority LOW 24
The TIFFRGBAImageGet function in LibTIFF 3.9.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a TIFF file with an invalid combination of SamplesPerPixel and Photometri…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.0197 · Published 2010-07-06 · Fixed CWE-119
THREATIST.IORead the docs