USN-801-1: tiff vulnerability

iBot · #1 (**permalink**) 07-13-2009

Referenced CVEs:
CVE-2009-2347

Description:
=========================================================== Ubuntu Security Notice USN-801-1 July 13, 2009 tiff vulnerability CVE-2009-2347 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 8.04 LTS Ubuntu 8.10 Ubuntu 9.04 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.06 LTS: libtiff4 3.7.4-1ubuntu3.6 Ubuntu 8.04 LTS: libtiff4 3.8.2-7ubuntu3.4 Ubuntu 8.10: libtiff4 3.8.2-11ubuntu0.8.10.3 Ubuntu 9.04: libtiff4 3.8.2-11ubuntu0.9.04.3 In general, a standard system upgrade is sufficient to effect the necessary changes. Details follow: Tielei Wang and Tom Lane discovered that the TIFF library did not correctly handle certain malformed TIFF images. If a user or automated system were tricked into processing a malicious image, an attacker could execute arbitrary code with the privileges of the user invoking the program.

More...

More UNIX and Linux Forum Topics You Might Find Helpful
Thread	Thread Starter	Forum	Replies	Last Post
USN-797-1: tiff vulnerability	iBot	Security Advisories (RSS)	0	07-06-2009 03:00 PM
USN-639-1: tiff vulnerability	iBot	Security Advisories (RSS)	0	09-02-2008 05:00 PM
Tiff Plugin 0.3.2 (Default branch)	iBot	Software Releases - RSS News	0	03-27-2008 10:00 PM
Automatized .ps into .tiff conversion	cordobapab	UNIX for Dummies Questions & Answers	1	01-18-2006 04:24 PM
Printing .TIFF files	elbryan	UNIX for Dummies Questions & Answers	3	09-05-2001 02:12 PM

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes	Rate This Thread
Switch to Linear Mode Switch to Hybrid Mode Threaded Mode	Rate This Thread:


	Powered by