Red Hat Security AdvisoryRHSA-2012:1054
libtiff security update
Released 2012-07-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) libtiff-3.8.2-15.el5_8, libtiff-devel-3.8.2-15.el5_8, libtiff-devel-3.8.2-15.el5_8.i386
- Red Hat Enterprise Linux (v. 5 server) libtiff-3.8.2-15.el5_8, libtiff-3.8.2-15.el5_8.i386, libtiff-3.8.2-15.el5_8.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) libtiff-3.8.2-15.el5_8, libtiff-3.8.2-15.el5_8.i386
- Red Hat Enterprise Linux Desktop (v. 6) libtiff-3.9.4-6.el6_3
- Red Hat Enterprise Linux Desktop Optional (v. 6) libtiff-3.9.4-6.el6_3, libtiff-devel-3.9.4-6.el6_3, libtiff-static-3.9.4-6.el6_3
- Red Hat Enterprise Linux HPC Node (v. 6) libtiff-3.9.4-6.el6_3
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libtiff-3.9.4-6.el6_3, libtiff-devel-3.9.4-6.el6_3, libtiff-static-3.9.4-6.el6_3
- Red Hat Enterprise Linux Server (v. 6) libtiff-3.9.4-6.el6_3, libtiff-3.9.4-6.el6_3.ppc, libtiff-devel-3.9.4-6.el6_3 +1
- Red Hat Enterprise Linux Server Optional (v. 6) libtiff-3.9.4-6.el6_3, libtiff-static-3.9.4-6.el6_3
- Red Hat Enterprise Linux Workstation (v. 6) libtiff-3.9.4-6.el6_3, libtiff-devel-3.9.4-6.el6_3
- Red Hat Enterprise Linux Workstation Optional (v. 6) libtiff-3.9.4-6.el6_3, libtiff-static-3.9.4-6.el6_3
Fixes 2 records
Priority MEDIUM 42
Integer signedness error in the TIFFReadDirectory function in tif_dirread.c in libtiff 3.9.4 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.06459 · Published 2012-07-22 · Fixed CWE-189
Priority LOW 39
Multiple integer overflows in tiff2pdf in libtiff before 4.0.2 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted tiff image, which triggers a heap-ba…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.0555 · Published 2012-07-22 · Fixed CWE-189
