Red Hat Security AdvisoryRHSA-2010:0520
libtiff security update
Released 2010-07-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 libtiff-3.5.7-34.el3, libtiff-3.5.7-34.el3.i386, libtiff-devel-3.5.7-34.el3 +1
- Red Hat Enterprise Linux AS version 3 libtiff-3.5.7-34.el3, libtiff-3.5.7-34.el3.i386, libtiff-3.5.7-34.el3.ia64 +5
- Red Hat Enterprise Linux ES version 3 libtiff-3.5.7-34.el3, libtiff-3.5.7-34.el3.i386, libtiff-3.5.7-34.el3.ia64 +3
- Red Hat Enterprise Linux WS version 3 libtiff-3.5.7-34.el3, libtiff-3.5.7-34.el3.i386, libtiff-3.5.7-34.el3.ia64 +3
Fixes 2 records
Priority MEDIUM 44
Multiple integer overflows in the Fax3SetupState function in tif_fax3.c in the FAX3 decoder in LibTIFF before 3.9.3, as used in ImageIO in Apple Mac OS X 10.5.8 and Mac OS X 10.6 before 10.6.4, allow remote attackers to…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.12854 · Published 2010-06-17 · Fixed CWE-189
Priority LOW 24
LibTIFF in Red Hat Enterprise Linux (RHEL) 3 on x86_64 platforms, as used in tiff2rgba, attempts to process image data even when the required compression functionality is not configured, which allows remote attackers to…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01986 · Published 2010-07-01 · Fixed CWE-20
