MDVSA-2012:174 -- Mandriva libtiffID: oval:org.secpod.oval:def:1300143 | Date: (C)2013-01-01 (M)2023-02-20 |
Class: PATCH | Family: unix |
Multiple vulnerabilities was found and corrected in libtiff: Heap-based buffer overflow in tif_pixarlog.c in LibTIFF before 4.0.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted TIFF image using the PixarLog Compression format . ppm2tiff does not check the return value of the TIFFScanlineSize function, which allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted PPM image that triggers an integer overflow, a zero-memory allocation, and a heap-based buffer overflow . The updated packages have been patched to correct these issues.
Platform: |
Mandriva Enterprise Server 5.2 |