[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

CESA-2011:0318 -- centos 5 x86_64 libtiff

ID: oval:org.secpod.oval:def:201492Date: (C)2012-01-31   (M)2022-08-16
Class: PATCHFamily: unix




The libtiff packages contain a library of functions for manipulating Tagged Image File Format files. A heap-based buffer overflow flaw was found in the way libtiff processed certain TIFF Internet Fax image files, compressed with the CCITT Group 4 compression algorithm. An attacker could use this flaw to create a specially-crafted TIFF file that, when opened, would cause an application linked against libtiff to crash or, possibly, execute arbitrary code. Red Hat would like to thank Apple Product Security for reporting this issue. All libtiff users should upgrade to these updated packages, which contain a backported patch to resolve this issue. All running applications linked against libtiff must be restarted for this update to take effect.

Platform:
CentOS 5
Product:
libtiff
Reference:
CESA-2011:0318
CVE-2011-0192
CVE    1
CVE-2011-0192
CPE    2
cpe:/o:centos:centos:5
cpe:/a:libtiff:libtiff

© SecPod Technologies