LibTIFF EstimateStripByteCounts() Denial of Service Vulnerability
BID:19284
CVE-2006-3463 |Info
LibTIFF EstimateStripByteCounts() Denial of Service Vulnerability
| Bugtraq ID: | 19284 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2006-3463 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 01 2006 12:00AM |
| Updated: | Aug 25 2008 09:05PM |
| Credit: | Tavis Ormandy, Google Security Team is credited with the discovery of this vulnerability. |
| Vulnerable: |
Ubuntu Ubuntu Linux 5.10 sparc Ubuntu Ubuntu Linux 5.10 powerpc Ubuntu Ubuntu Linux 5.10 i386 Ubuntu Ubuntu Linux 5.10 amd64 Ubuntu Ubuntu Linux 5.0 4 powerpc Ubuntu Ubuntu Linux 5.0 4 i386 Ubuntu Ubuntu Linux 5.0 4 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 Trustix Secure Linux 3.0 Trustix Secure Linux 2.2 Trustix Secure Enterprise Linux 2.0 SuSE SUSE Linux Enterprise Server 8 SuSE SUSE Linux Enterprise SDK 10 SuSE Linux Enterprise Server 9 SuSE Linux Enterprise Server 10 SuSE Linux Desktop 1.0 Sun Solaris 9_x86 Sun Solaris 9 Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 10_x86 Sun Solaris 10 Slackware Linux 10.2 Slackware Linux 10.1 Slackware Linux 10.0 Slackware Linux 9.1 Slackware Linux 9.0 SGI ProPack 3.0 SP6 S.u.S.E. UnitedLinux 1.0 S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 10.0 S.u.S.E. Linux Professional 9.3 x86_64 S.u.S.E. Linux Professional 9.3 S.u.S.E. Linux Professional 9.2 x86_64 S.u.S.E. Linux Professional 9.2 S.u.S.E. Linux Professional 10.1 S.u.S.E. Linux Personal 9.3 x86_64 S.u.S.E. Linux Personal 9.3 S.u.S.E. Linux Personal 9.2 x86_64 S.u.S.E. Linux Personal 9.2 rPath rPath Linux 1 Redhat Fedora Core5 Redhat Enterprise Linux WS 4 Redhat Enterprise Linux WS 3 Redhat Enterprise Linux WS 2.1 IA64 Redhat Enterprise Linux WS 2.1 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux ES 3 Redhat Enterprise Linux ES 2.1 IA64 Redhat Enterprise Linux ES 2.1 Redhat Enterprise Linux AS 4 Redhat Enterprise Linux AS 3 Redhat Enterprise Linux AS 2.1 IA64 Redhat Enterprise Linux AS 2.1 Redhat Desktop 4.0 Redhat Desktop 3.0 Redhat Advanced Workstation for the Itanium Processor 2.1 IA64 Redhat Advanced Workstation for the Itanium Processor 2.1 Mandriva Linux Mandrake 2006.0 x86_64 Mandriva Linux Mandrake 2006.0 MandrakeSoft Multi Network Firewall 2.0 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 LibTIFF LibTIFF 3.8.2 LibTIFF LibTIFF 3.8.1 LibTIFF LibTIFF 3.8 LibTIFF LibTIFF 3.7.3 LibTIFF LibTIFF 3.7.2 LibTIFF LibTIFF 3.7.1 LibTIFF LibTIFF 3.7 LibTIFF LibTIFF 3.6.1 LibTIFF LibTIFF 3.6 .0 LibTIFF LibTIFF 3.5.7 LibTIFF LibTIFF 3.5.5 LibTIFF LibTIFF 3.5.4 LibTIFF LibTIFF 3.5.3 LibTIFF LibTIFF 3.5.2 LibTIFF LibTIFF 3.5.1 LibTIFF LibTIFF 3.4 Gentoo Linux Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 Avaya Messaging Storage Server Avaya Message Networking Avaya Intuity LX |
| Not Vulnerable: | |
Discussion
LibTIFF EstimateStripByteCounts() Denial of Service Vulnerability
LibTIFF is affected by a denial-of-service vulnerability.
An attacker can exploit this vulnerability to cause a denial of service in applications using the affected library.
LibTIFF is affected by a denial-of-service vulnerability.
An attacker can exploit this vulnerability to cause a denial of service in applications using the affected library.
Exploit / POC
LibTIFF EstimateStripByteCounts() Denial of Service Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Solution / Fix
LibTIFF EstimateStripByteCounts() Denial of Service Vulnerability
Solution:
Please see the referenced advisories for information on obtaining and applying the appropriate updates.
Sun Solaris 10
Sun Solaris 10_x86
LibTIFF LibTIFF 3.5.7
LibTIFF LibTIFF 3.6.1
LibTIFF LibTIFF 3.7.1
LibTIFF LibTIFF 3.7.2
LibTIFF LibTIFF 3.7.3
Solution:
Please see the referenced advisories for information on obtaining and applying the appropriate updates.
Sun Solaris 10
-
Sun Solaris 10 SPARC patch 119900-03
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119900-03-1
Sun Solaris 10_x86
-
Sun Solaris 10 x86 patch 119901-03
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119901-03-1
LibTIFF LibTIFF 3.5.7
-
Slackware libtiff-3.8.2-i386-1_slack9.0.tgz
Slackware 9.0:
ftp://ftp.slackware.com/pub/slackware/slackware-9.0/patches/packages/l ibtiff-3.8.2-i386-1_slack9.0.tgz -
Slackware libtiff-3.8.2-i486-1_slack9.1.tgz
Slackware 9.0:
ftp://ftp.slackware.com/pub/slackware/slackware-9.1/patches/packages/l ibtiff-3.8.2-i486-1_slack9.1.tgz
LibTIFF LibTIFF 3.6.1
-
Slackware libtiff-3.8.2-i486-1_slack10.0.tgz
Slackware 10.0:
ftp://ftp.slackware.com/pub/slackware/slackware-10.0/patches/packages/ libtiff-3.8.2-i486-1_slack10.0.tgz -
Slackware libtiff-3.8.2-i486-1_slack10.1.tgz
Slackware 10.0:
ftp://ftp.slackware.com/pub/slackware/slackware-10.1/patches/packages/ libtiff-3.8.2-i486-1_slack10.1.tgz -
Trustix libtiff-3.7.3-4tr.i586.rpm
Trustix Secure Linux 2.2
ftp://ftp.trustix.org/pub/trustix/updates -
Trustix libtiff-devel-3.7.3-4tr.i586.rpm
Trustix Secure Linux 2.2
ftp://ftp.trustix.org/pub/trustix/updates -
Ubuntu libtiff-tools_3.6.1-5ubuntu0.6_amd64.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-tools_3.6.1 -5ubuntu0.6_amd64.deb -
Ubuntu libtiff-tools_3.6.1-5ubuntu0.6_i386.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-tools_3.6.1 -5ubuntu0.6_i386.deb -
Ubuntu libtiff-tools_3.6.1-5ubuntu0.6_powerpc.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-tools_3.6.1 -5ubuntu0.6_powerpc.deb -
Ubuntu libtiff4-dev_3.6.1-5ubuntu0.6_amd64.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4-dev_3.6.1- 5ubuntu0.6_amd64.deb -
Ubuntu libtiff4-dev_3.6.1-5ubuntu0.6_i386.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4-dev_3.6.1- 5ubuntu0.6_i386.deb -
Ubuntu libtiff4-dev_3.6.1-5ubuntu0.6_powerpc.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4-dev_3.6.1- 5ubuntu0.6_powerpc.deb -
Ubuntu libtiff4_3.6.1-5ubuntu0.6_amd64.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4_3.6.1-5ubu ntu0.6_amd64.deb -
Ubuntu libtiff4_3.6.1-5ubuntu0.6_i386.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4_3.6.1-5ubu ntu0.6_i386.deb -
Ubuntu libtiff4_3.6.1-5ubuntu0.6_powerpc.deb
Ubuntu 5.04:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4_3.6.1-5ubu ntu0.6_powerpc.deb
LibTIFF LibTIFF 3.7.1
-
Slackware libtiff-3.8.2-i486-1_slack10.1.tgz
Slackware 10.0:
ftp://ftp.slackware.com/pub/slackware/slackware-10.1/patches/packages/ libtiff-3.8.2-i486-1_slack10.1.tgz -
Slackware libtiff-3.8.2-i486-1_slack10.1.tgz
Slackware 10.1:
ftp://ftp.slackware.com/pub/slackware/slackware-10.1/patches/packages/ libtiff-3.8.2-i486-1_slack10.1.tgz -
Slackware libtiff-3.8.2-i486-1_slack10.2.tgz
Slackware 10.2:
ftp://ftp.slackware.com/pub/slackware/slackware-10.2/patches/packages/ libtiff-3.8.2-i486-1_slack10.2.tgz
LibTIFF LibTIFF 3.7.2
-
Debian libtiff-opengl_3.7.2-7_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-7_alpha.deb -
Debian libtiff-opengl_3.7.2-7_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-7_amd64.deb -
Debian libtiff-opengl_3.7.2-7_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-7_arm.deb -
Debian libtiff-opengl_3.7.2-7_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-7_hppa.deb -
Debian libtiff-opengl_3.7.2-7_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-7_i386.deb -
Debian libtiff-opengl_3.7.2-7_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-7_ia64.deb -
Debian libtiff-opengl_3.7.2-7_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-7_m68k.deb -
Debian libtiff-opengl_3.7.2-7_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-7_mips.deb -
Debian libtiff-opengl_3.7.2-7_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-7_mipsel.deb -
Debian libtiff-opengl_3.7.2-7_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-7_powerpc.deb -
Debian libtiff-opengl_3.7.2-7_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-7_s390.deb -
Debian libtiff-opengl_3.7.2-7_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-7_sparc.deb -
Debian libtiff-tools_3.7.2-7_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-7_alpha.deb -
Debian libtiff-tools_3.7.2-7_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-7_amd64.deb -
Debian libtiff-tools_3.7.2-7_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-7_arm.deb -
Debian libtiff-tools_3.7.2-7_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-7_hppa.deb -
Debian libtiff-tools_3.7.2-7_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-7_i386.deb -
Debian libtiff-tools_3.7.2-7_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-7_ia64.deb -
Debian libtiff-tools_3.7.2-7_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-7_m68k.deb -
Debian libtiff-tools_3.7.2-7_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-7_mips.deb -
Debian libtiff-tools_3.7.2-7_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-7_mipsel.deb -
Debian libtiff-tools_3.7.2-7_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-7_powerpc.deb -
Debian libtiff-tools_3.7.2-7_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-7_s390.deb -
Debian libtiff-tools_3.7.2-7_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-7_sparc.deb -
Debian libtiff4-dev_3.7.2-7_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -7_alpha.deb -
Debian libtiff4-dev_3.7.2-7_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -7_amd64.deb -
Debian libtiff4-dev_3.7.2-7_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -7_arm.deb -
Debian libtiff4-dev_3.7.2-7_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -7_hppa.deb -
Debian libtiff4-dev_3.7.2-7_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -7_i386.deb -
Debian libtiff4-dev_3.7.2-7_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -7_ia64.deb -
Debian libtiff4-dev_3.7.2-7_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -7_m68k.deb -
Debian libtiff4-dev_3.7.2-7_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -7_mips.deb -
Debian libtiff4-dev_3.7.2-7_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -7_mipsel.deb -
Debian libtiff4-dev_3.7.2-7_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -7_powerpc.deb -
Debian libtiff4-dev_3.7.2-7_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -7_s390.deb -
Debian libtiff4-dev_3.7.2-7_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -7_sparc.deb -
Debian libtiff4_3.7.2-7_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-7_a lpha.deb -
Debian libtiff4_3.7.2-7_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-7_a md64.deb -
Debian libtiff4_3.7.2-7_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-7_a rm.deb -
Debian libtiff4_3.7.2-7_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-7_h ppa.deb -
Debian libtiff4_3.7.2-7_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-7_i 386.deb -
Debian libtiff4_3.7.2-7_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-7_i a64.deb -
Debian libtiff4_3.7.2-7_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-7_m 68k.deb -
Debian libtiff4_3.7.2-7_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-7_m ips.deb -
Debian libtiff4_3.7.2-7_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-7_m ipsel.deb -
Debian libtiff4_3.7.2-7_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-7_p owerpc.deb -
Debian libtiff4_3.7.2-7_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-7_s 390.deb -
Debian libtiff4_3.7.2-7_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-7_s parc.deb -
Debian libtiffxx0_3.7.2-7_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-7 _alpha.deb -
Debian libtiffxx0_3.7.2-7_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-7 _amd64.deb -
Debian libtiffxx0_3.7.2-7_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-7 _arm.deb -
Debian libtiffxx0_3.7.2-7_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-7 _hppa.deb -
Debian libtiffxx0_3.7.2-7_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-7 _i386.deb -
Debian libtiffxx0_3.7.2-7_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-7 _ia64.deb -
Debian libtiffxx0_3.7.2-7_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-7 _m68k.deb -
Debian libtiffxx0_3.7.2-7_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-7 _mips.deb -
Debian libtiffxx0_3.7.2-7_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-7 _mipsel.deb -
Debian libtiffxx0_3.7.2-7_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-7 _powerpc.deb -
Debian libtiffxx0_3.7.2-7_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-7 _s390.deb -
Debian libtiffxx0_3.7.2-7_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-7 _sparc.deb
LibTIFF LibTIFF 3.7.3
-
Trustix libtiff-3.7.3-4tr.i586.rpm
Trustix Secure Linux 3.0
ftp://ftp.trustix.org/pub/trustix/updates -
Trustix libtiff-devel-3.7.3-4tr.i586.rpm
Trustix Secure Linux 3.0
ftp://ftp.trustix.org/pub/trustix/updates -
Trustix libtiff-docs-3.7.3-4tr.i586.rpm
Trustix Secure Linux 3.0
ftp://ftp.trustix.org/pub/trustix/updates -
Ubuntu libtiff-opengl_3.7.3-1ubuntu1.5_amd64.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/universe/t/tiff/libtiff-opengl_ 3.7.3-1ubuntu1.5_amd64.deb -
Ubuntu libtiff-opengl_3.7.3-1ubuntu1.5_i386.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/universe/t/tiff/libtiff-opengl_ 3.7.3-1ubuntu1.5_i386.deb -
Ubuntu libtiff-opengl_3.7.3-1ubuntu1.5_powerpc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/universe/t/tiff/libtiff-opengl_ 3.7.3-1ubuntu1.5_powerpc.deb -
Ubuntu libtiff-opengl_3.7.3-1ubuntu1.5_sparc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/universe/t/tiff/libtiff-opengl_ 3.7.3-1ubuntu1.5_sparc.deb -
Ubuntu libtiff-tools_3.7.3-1ubuntu1.5_amd64.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-tools_3.7.3 -1ubuntu1.5_amd64.deb -
Ubuntu libtiff-tools_3.7.3-1ubuntu1.5_i386.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-tools_3.7.3 -1ubuntu1.5_i386.deb -
Ubuntu libtiff-tools_3.7.3-1ubuntu1.5_powerpc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-tools_3.7.3 -1ubuntu1.5_powerpc.deb -
Ubuntu libtiff-tools_3.7.3-1ubuntu1.5_sparc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-tools_3.7.3 -1ubuntu1.5_sparc.deb -
Ubuntu libtiff4-dev_3.7.3-1ubuntu1.5_amd64.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4-dev_3.7.3- 1ubuntu1.5_amd64.deb -
Ubuntu libtiff4-dev_3.7.3-1ubuntu1.5_i386.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4-dev_3.7.3- 1ubuntu1.5_i386.deb -
Ubuntu libtiff4-dev_3.7.3-1ubuntu1.5_powerpc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4-dev_3.7.3- 1ubuntu1.5_powerpc.deb -
Ubuntu libtiff4-dev_3.7.3-1ubuntu1.5_sparc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4-dev_3.7.3- 1ubuntu1.5_sparc.deb -
Ubuntu libtiff4_3.7.3-1ubuntu1.5_amd64.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4_3.7.3-1ubu ntu1.5_amd64.deb -
Ubuntu libtiff4_3.7.3-1ubuntu1.5_i386.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4_3.7.3-1ubu ntu1.5_i386.deb -
Ubuntu libtiff4_3.7.3-1ubuntu1.5_powerpc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4_3.7.3-1ubu ntu1.5_powerpc.deb -
Ubuntu libtiff4_3.7.3-1ubuntu1.5_sparc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4_3.7.3-1ubu ntu1.5_sparc.deb -
Ubuntu libtiffxx0c2_3.7.3-1ubuntu1.5_amd64.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiffxx0c2_3.7.3- 1ubuntu1.5_amd64.deb -
Ubuntu libtiffxx0c2_3.7.3-1ubuntu1.5_i386.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiffxx0c2_3.7.3- 1ubuntu1.5_i386.deb -
Ubuntu libtiffxx0c2_3.7.3-1ubuntu1.5_powerpc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiffxx0c2_3.7.3- 1ubuntu1.5_powerpc.deb -
Ubuntu libtiffxx0c2_3.7.3-1ubuntu1.5_sparc.deb
Ubuntu 5.10:
http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiffxx0c2_3.7.3- 1ubuntu1.5_sparc.deb
References
LibTIFF EstimateStripByteCounts() Denial of Service Vulnerability
References:
References:
- ASA-2006-166 - libtiff security update (RHSA-2006-0603) (Avaya)
- LibTIFF Homepage (LibTIFF)
- RHSA-2006:0603-4 - libtiff security update (Red Hat)
- RHSA-2006:0648-4 - kdegraphics security update (Red Hat)
- Sun Advisory 201331 - Security Vulnerabilities in libtiff(3) May Allow Denial of (Sun)
- rPSA-2006-0142-1 libtiff (rPath)
- Multiple Security Vulnerabilities in the Solaris Tag Image File Format Library l (Sun Microsystems)