USN-639-1: tiff vulnerability


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) USN-639-1: tiff vulnerability
# 1  
Old 09-02-2008
USN-639-1: tiff vulnerability

Referenced CVEs:
CVE-2008-2327


Description:
=========================================================== Ubuntu Security Notice USN-639-1 September 02, 2008 tiff vulnerability CVE-2008-2327 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 7.04 Ubuntu 7.10 Ubuntu 8.04 LTS This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.06 LTS: libtiff4 3.7.4-1ubuntu3.3 Ubuntu 7.04: libtiff4 3.8.2-6ubuntu1 Ubuntu 7.10: libtiff4 3.8.2-7ubuntu2.1 Ubuntu 8.04 LTS: libtiff4 3.8.2-7ubuntu3.1 In general, a standard system upgrade is sufficient to effect the necessary changes. Details follow: Drew Yao discovered that the TIFF library did not correctly validate LZW compressed TIFF images. If a user or automated system were tricked into processing a malicious image, a remote attacker could execute arbitrary code or cause an application linked against libtiff to crash, leading to a denial of service.





More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
STEREO3D(1)						      General Commands Manual						       STEREO3D(1)

NAME
stereo3d - render a Raster3D scene as a side-by-side stereo pair SYNOPSIS
stereo3d [options] [-png [outfile.png ]] < infile.r3d > outfile.png stereo3d [options] -tiff [outfile.tiff] < infile.r3d > outfile.tiff stereo3d is a shell script that renders a single Raster3D input file as a side-by-side stereo pair. stereo3d uses the Raster3D utilities normal3d and render, and the ImageMagick image processing package. Intermediate scratch files are created in directory TMPDIR, if defined, otherwise in /usr/tmp. The right eye and left eye views are separately rendered, optionally given black borders, and merged to form a single side-by-side stereo pair. Input is from stdin, output is to stdout unless a filename is given as an argument to the -png or -tiff options. EXAMPLES
If the following line would render a single image: render -tiff single.tiff < input.r3d then the following line would render the same scene as a stereo pair instead: stereo3d -tiff stereo.tiff < input.r3d OPTIONS
The options below are specific to stereo3d. All other options, e.g. -labels or -gamma 1.2 are passed through to the render program. -angsep By default the stereo effect is generated by a shear operation. The -angsep option creates stereo by using angular separation instead. Neither option is perfect: the default handles shadows badly, and the -angsep option blurs specular highlights. -border By default the left and right images are placed next to each other with no intervening space and no frame around them. The -border option requests a 4 pixel wide black border separating and surrounding the component images. SOURCE
web URL: http://www.bmsc.washington.edu/raster3d/raster3d.html contact: Ethan A Merritt University of Washington, Seattle WA 98195 merritt@u.washington.edu SEE ALSO
normal3d(l), render(l), raster3d(l) AUTHORS
Ethan A Merritt. Raster3D 19 Dec 2010 STEREO3D(1)