Red Hat Security AdvisoryRHSA-2012:0468
libtiff security update
Released 2012-04-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) libtiff-3.8.2-14.el5_8, libtiff-devel-3.8.2-14.el5_8, libtiff-devel-3.8.2-14.el5_8.i386
- Red Hat Enterprise Linux (v. 5 server) libtiff-3.8.2-14.el5_8, libtiff-3.8.2-14.el5_8.i386, libtiff-3.8.2-14.el5_8.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) libtiff-3.8.2-14.el5_8, libtiff-3.8.2-14.el5_8.i386
- Red Hat Enterprise Linux Desktop (v. 6) libtiff-3.9.4-5.el6_2
- Red Hat Enterprise Linux Desktop Optional (v. 6) libtiff-3.9.4-5.el6_2, libtiff-devel-3.9.4-5.el6_2, libtiff-static-3.9.4-5.el6_2
- Red Hat Enterprise Linux HPC Node (v. 6) libtiff-3.9.4-5.el6_2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libtiff-3.9.4-5.el6_2, libtiff-devel-3.9.4-5.el6_2, libtiff-static-3.9.4-5.el6_2
- Red Hat Enterprise Linux Server (v. 6) libtiff-3.9.4-5.el6_2, libtiff-3.9.4-5.el6_2.ppc, libtiff-devel-3.9.4-5.el6_2 +1
- Red Hat Enterprise Linux Server Optional (v. 6) libtiff-3.9.4-5.el6_2, libtiff-static-3.9.4-5.el6_2
- Red Hat Enterprise Linux Workstation (v. 6) libtiff-3.9.4-5.el6_2, libtiff-devel-3.9.4-5.el6_2
- Red Hat Enterprise Linux Workstation Optional (v. 6) libtiff-3.9.4-5.el6_2, libtiff-static-3.9.4-5.el6_2
Fixes 1 record
Priority MEDIUM 40
Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a TIFF file, which is not properly handled by the (1) gtTileSeparate or (2) gtStr…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.0684 · Published 2012-06-04 · Partial fix CWE-189
