Red Hat Security AdvisoryRHSA-2012:1590
libtiff security update
Released 2012-12-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) libtiff-3.8.2-18.el5_8, libtiff-devel-3.8.2-18.el5_8, libtiff-devel-3.8.2-18.el5_8.i386
- Red Hat Enterprise Linux (v. 5 server) libtiff-3.8.2-18.el5_8, libtiff-3.8.2-18.el5_8.i386, libtiff-3.8.2-18.el5_8.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) libtiff-3.8.2-18.el5_8, libtiff-3.8.2-18.el5_8.i386
- Red Hat Enterprise Linux Desktop (v. 6) libtiff-3.9.4-9.el6_3
- Red Hat Enterprise Linux Desktop Optional (v. 6) libtiff-3.9.4-9.el6_3, libtiff-devel-3.9.4-9.el6_3, libtiff-static-3.9.4-9.el6_3
- Red Hat Enterprise Linux HPC Node (v. 6) libtiff-3.9.4-9.el6_3
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libtiff-3.9.4-9.el6_3, libtiff-devel-3.9.4-9.el6_3, libtiff-static-3.9.4-9.el6_3
- Red Hat Enterprise Linux Server (v. 6) libtiff-3.9.4-9.el6_3, libtiff-3.9.4-9.el6_3.ppc, libtiff-devel-3.9.4-9.el6_3 +1
- Red Hat Enterprise Linux Server Optional (v. 6) libtiff-3.9.4-9.el6_3, libtiff-static-3.9.4-9.el6_3
- Red Hat Enterprise Linux Workstation (v. 6) libtiff-3.9.4-9.el6_3, libtiff-devel-3.9.4-9.el6_3
- Red Hat Enterprise Linux Workstation Optional (v. 6) libtiff-3.9.4-9.el6_3, libtiff-static-3.9.4-9.el6_3
Fixes 4 records
Priority MEDIUM 45
ppm2tiff does not check the return value of the TIFFScanlineSize function, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PPM image that triggers an i…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.13521 · Published 2012-11-11 · Fixed
Priority MEDIUM 40
Heap-based buffer overflow in tif_pixarlog.c in LibTIFF before 4.0.3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted TIFF image using the PixarLo…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.06728 · Published 2012-10-28 · Fixed CWE-119
Priority LOW 37
Stack-based buffer overflow in tif_dir.c in LibTIFF before 4.0.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DOTRANGE tag in a TIFF image.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04247 · Published 2013-01-04 · Fixed CWE-119
Priority LOW 37
The t2p_read_tiff_init function in tiff2pdf (tools/tiff2pdf.c) in LibTIFF 4.0.2 and earlier does not properly initialize the T2P context struct pointer in certain error conditions, which allows context-dependent attacker…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.0407 · Published 2012-08-13 · Fixed CWE-119
THREATIST.IORead the docs