LibTIFF 'tif_dirread.c' SubjectDistance EXIF Tag Remote Stack Buffer Overflow Vulnerability

Bugtraq ID:	41012
Class:	Boundary Condition Error
CVE:	CVE-2010-2067
Remote:	Yes
Local:	No
Published:	Jun 10 2010 12:00AM
Updated:	Apr 13 2015 08:48PM
Credit:	Dan Rosenberg
Vulnerable:	Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 9.04 sparc Ubuntu Ubuntu Linux 9.04 powerpc Ubuntu Ubuntu Linux 9.04 lpia Ubuntu Ubuntu Linux 9.04 i386 Ubuntu Ubuntu Linux 9.04 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 amd64 Slackware Linux 10.2 Slackware Linux 10.1 Slackware Linux 10.0 Slackware Linux 9.1 Slackware Linux 9.0 Slackware Linux x86_64 -current Slackware Linux 13.1 x86_64 Slackware Linux 13.1 Slackware Linux 13.0 x86_64 Slackware Linux 13.0 Slackware Linux 12.2 Slackware Linux 12.1 Slackware Linux 12.0 Slackware Linux 11.0 Slackware Linux -current Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Mandriva Linux Mandrake 2010.0 x86_64 Mandriva Linux Mandrake 2010.0 LibTIFF LibTIFF 3.8.2 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 alpha + Debian Linux 3.1 LibTIFF LibTIFF 3.8.1 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 alpha + Debian Linux 3.1 LibTIFF LibTIFF 3.8 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 alpha + Debian Linux 3.1 LibTIFF LibTIFF 3.7.4 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 alpha + Debian Linux 3.1 LibTIFF LibTIFF 3.7.3 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 alpha + Debian Linux 3.1 LibTIFF LibTIFF 3.7.2 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 alpha + Debian Linux 3.1 LibTIFF LibTIFF 3.7.1 LibTIFF LibTIFF 3.7 + Slackware Linux 10.0 + Slackware Linux -current LibTIFF LibTIFF 3.6.1 + Gentoo Linux 1.4 + Gentoo Linux + OpenPKG OpenPKG Current + Turbolinux Turbolinux Server 10.0 + Ubuntu Ubuntu Linux 5.0 4 powerpc + Ubuntu Ubuntu Linux 5.0 4 i386 + Ubuntu Ubuntu Linux 5.0 4 amd64 + Ubuntu Ubuntu Linux 4.1 ppc + Ubuntu Ubuntu Linux 4.1 ia64 + Ubuntu Ubuntu Linux 4.1 ia32 LibTIFF LibTIFF 3.6 .0 LibTIFF LibTIFF 3.5.7 + Red Hat Fedora Core2 + Slackware Linux 9.1 + Slackware Linux 9.0 + Slackware Linux 8.1 + Turbolinux Appliance Server Hosting Edition 1.0 + Turbolinux Appliance Server Workgroup Edition 1.0 + Turbolinux Turbolinux Desktop 10.0 + Turbolinux Turbolinux Server 8.0 LibTIFF LibTIFF 3.5.5 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha + Debian Linux 3.0 + Turbolinux Turbolinux Server 7.0 + Turbolinux Turbolinux Workstation 8.0 + Turbolinux Turbolinux Workstation 7.0 LibTIFF LibTIFF 3.5.4 LibTIFF LibTIFF 3.5.3 LibTIFF LibTIFF 3.5.2 LibTIFF LibTIFF 3.5.1 LibTIFF LibTIFF 3.4 LibTIFF LibTIFF 3.9 LibTIFF LibTIFF 3.7.2-7 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 alpha + Debian Linux 3.1
Not Vulnerable:	LibTIFF LibTIFF 3.9.3

LibTIFF 'tif_dirread.c' SubjectDistance EXIF Tag Remote Stack Buffer Overflow Vulnerability

LibTIFF is prone to a remote stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

An attacker can exploit this issue to execute arbitrary malicious code in the context of a user running an application that uses the affected library. Failed exploit attempts will likely crash the application.

Versions prior to LibTIFF 3.9.3 are vulnerable.

LibTIFF 'tif_dirread.c' SubjectDistance EXIF Tag Remote Stack Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

LibTIFF 'tif_dirread.c' SubjectDistance EXIF Tag Remote Stack Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 9.10 sparc

• Ubuntu libtiff-doc_3.8.2-13ubuntu0.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-doc_3.8.2-1 3ubuntu0.3_all.deb


• Ubuntu libtiff-opengl_3.8.2-13ubuntu0.3_sparc.deb
  http://ports.ubuntu.com/pool/universe/t/tiff/libtiff-opengl_3.8.2-13ub untu0.3_sparc.deb


• Ubuntu libtiff-tools_3.8.2-13ubuntu0.3_sparc.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiff-tools_3.8.2-13ubuntu0 .3_sparc.deb


• Ubuntu libtiff4-dev_3.8.2-13ubuntu0.3_sparc.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiff4-dev_3.8.2-13ubuntu0. 3_sparc.deb


• Ubuntu libtiff4_3.8.2-13ubuntu0.3_sparc.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiff4_3.8.2-13ubuntu0.3_sp arc.deb


• Ubuntu libtiffxx0c2_3.8.2-13ubuntu0.3_sparc.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiffxx0c2_3.8.2-13ubuntu0. 3_sparc.deb

Slackware Linux x86_64 -current

• Slackware libtiff-3.9.4-x86_64-1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/ l/libtiff-3.9.4-x86_64-1.txz

Slackware Linux 12.0

• Slackware libtiff-3.8.2-i486-4_slack12.0.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/ libtiff-3.8.2-i486-4_slack12.0.tgz

Slackware Linux -current

• Slackware libtiff-3.9.4-i486-1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/l/li btiff-3.9.4-i486-1.txz

Ubuntu Ubuntu Linux 8.04 LTS powerpc

• Ubuntu libtiff-opengl_3.8.2-7ubuntu3.6_powerpc.deb
  http://ports.ubuntu.com/pool/universe/t/tiff/libtiff-opengl_3.8.2-7ubu ntu3.6_powerpc.deb


• Ubuntu libtiff-tools_3.8.2-7ubuntu3.6_powerpc.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiff-tools_3.8.2-7ubuntu3. 6_powerpc.deb


• Ubuntu libtiff4-dev_3.8.2-7ubuntu3.6_powerpc.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiff4-dev_3.8.2-7ubuntu3.6 _powerpc.deb


• Ubuntu libtiff4_3.8.2-7ubuntu3.6_powerpc.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiff4_3.8.2-7ubuntu3.6_pow erpc.deb


• Ubuntu libtiffxx0c2_3.8.2-7ubuntu3.6_powerpc.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiffxx0c2_3.8.2-7ubuntu3.6 _powerpc.deb

Ubuntu Ubuntu Linux 8.04 LTS sparc

• Ubuntu libtiff-opengl_3.8.2-7ubuntu3.6_sparc.deb
  http://ports.ubuntu.com/pool/universe/t/tiff/libtiff-opengl_3.8.2-7ubu ntu3.6_sparc.deb


• Ubuntu libtiff-tools_3.8.2-7ubuntu3.6_sparc.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiff-tools_3.8.2-7ubuntu3. 6_sparc.deb


• Ubuntu libtiff4-dev_3.8.2-7ubuntu3.6_sparc.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiff4-dev_3.8.2-7ubuntu3.6 _sparc.deb


• Ubuntu libtiff4_3.8.2-7ubuntu3.6_sparc.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiff4_3.8.2-7ubuntu3.6_spa rc.deb


• Ubuntu libtiffxx0c2_3.8.2-7ubuntu3.6_sparc.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiffxx0c2_3.8.2-7ubuntu3.6 _sparc.deb

Slackware Linux 12.2

• Slackware libtiff-3.8.2-i486-4_slack12.2.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/ libtiff-3.8.2-i486-4_slack12.2.tgz

Ubuntu Ubuntu Linux 9.10 powerpc

• Ubuntu libtiff-doc_3.8.2-13ubuntu0.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-doc_3.8.2-1 3ubuntu0.3_all.deb


• Ubuntu libtiff-opengl_3.8.2-13ubuntu0.3_powerpc.deb
  http://ports.ubuntu.com/pool/universe/t/tiff/libtiff-opengl_3.8.2-13ub untu0.3_powerpc.deb


• Ubuntu libtiff-tools_3.8.2-13ubuntu0.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiff-tools_3.8.2-13ubuntu0 .3_powerpc.deb


• Ubuntu libtiff4-dev_3.8.2-13ubuntu0.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiff4-dev_3.8.2-13ubuntu0. 3_powerpc.deb


• Ubuntu libtiff4_3.8.2-13ubuntu0.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiff4_3.8.2-13ubuntu0.3_po werpc.deb


• Ubuntu libtiffxx0c2_3.8.2-13ubuntu0.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiffxx0c2_3.8.2-13ubuntu0. 3_powerpc.deb

Ubuntu Ubuntu Linux 6.06 LTS sparc

• Ubuntu libtiff-opengl_3.7.4-1ubuntu3.8_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/tiff/libtiff-opengl_ 3.7.4-1ubuntu3.8_sparc.deb


• Ubuntu libtiff-tools_3.7.4-1ubuntu3.8_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-tools_3.7.4 -1ubuntu3.8_sparc.deb


• Ubuntu libtiff4-dev_3.7.4-1ubuntu3.8_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4-dev_3.7.4- 1ubuntu3.8_sparc.deb


• Ubuntu libtiff4_3.7.4-1ubuntu3.8_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4_3.7.4-1ubu ntu3.8_sparc.deb


• Ubuntu libtiffxx0c2_3.7.4-1ubuntu3.8_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiffxx0c2_3.7.4- 1ubuntu3.8_sparc.deb

Ubuntu Ubuntu Linux 6.06 LTS powerpc

• Ubuntu libtiff-opengl_3.7.4-1ubuntu3.8_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/tiff/libtiff-opengl_ 3.7.4-1ubuntu3.8_powerpc.deb


• Ubuntu libtiff-tools_3.7.4-1ubuntu3.8_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-tools_3.7.4 -1ubuntu3.8_powerpc.deb


• Ubuntu libtiff4-dev_3.7.4-1ubuntu3.8_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4-dev_3.7.4- 1ubuntu3.8_powerpc.deb


• Ubuntu libtiff4_3.7.4-1ubuntu3.8_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4_3.7.4-1ubu ntu3.8_powerpc.deb


• Ubuntu libtiffxx0c2_3.7.4-1ubuntu3.8_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiffxx0c2_3.7.4- 1ubuntu3.8_powerpc.deb

Ubuntu Ubuntu Linux 8.04 LTS amd64

• Ubuntu libtiff-opengl_3.8.2-7ubuntu3.6_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/tiff/libtiff-opengl_ 3.8.2-7ubuntu3.6_amd64.deb


• Ubuntu libtiff-tools_3.8.2-7ubuntu3.6_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-tools_3.8.2 -7ubuntu3.6_amd64.deb


• Ubuntu libtiff4-dev_3.8.2-7ubuntu3.6_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4-dev_3.8.2- 7ubuntu3.6_amd64.deb


• Ubuntu libtiff4_3.8.2-7ubuntu3.6_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4_3.8.2-7ubu ntu3.6_amd64.deb


• Ubuntu libtiffxx0c2_3.8.2-7ubuntu3.6_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiffxx0c2_3.8.2- 7ubuntu3.6_amd64.deb

Slackware Linux 13.1 x86_64

• Slackware libtiff-3.9.4-x86_64-1_slack13.1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/package s/libtiff-3.9.4-x86_64-1_slack13.1.txz

Ubuntu Ubuntu Linux 9.10 lpia

• Ubuntu libtiff-doc_3.8.2-13ubuntu0.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-doc_3.8.2-1 3ubuntu0.3_all.deb


• Ubuntu libtiff-opengl_3.8.2-13ubuntu0.3_lpia.deb
  http://ports.ubuntu.com/pool/universe/t/tiff/libtiff-opengl_3.8.2-13ub untu0.3_lpia.deb


• Ubuntu libtiff-tools_3.8.2-13ubuntu0.3_lpia.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiff-tools_3.8.2-13ubuntu0 .3_lpia.deb


• Ubuntu libtiff4-dev_3.8.2-13ubuntu0.3_lpia.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiff4-dev_3.8.2-13ubuntu0. 3_lpia.deb


• Ubuntu libtiff4_3.8.2-13ubuntu0.3_lpia.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiff4_3.8.2-13ubuntu0.3_lp ia.deb


• Ubuntu libtiffxx0c2_3.8.2-13ubuntu0.3_lpia.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiffxx0c2_3.8.2-13ubuntu0. 3_lpia.deb

Mandriva Linux Mandrake 2010.1 x86_64

• Mandriva lib64tiff-devel-3.9.2-2.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64tiff-static-devel-3.9.2-2.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64tiff3-3.9.2-2.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva libtiff-progs-3.9.2-2.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 9.04 sparc

• Ubuntu libtiff-doc_3.8.2-11ubuntu0.9.04.6_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-doc_3.8.2-1 1ubuntu0.9.04.6_all.deb


• Ubuntu libtiff-opengl_3.8.2-11ubuntu0.9.04.6_sparc.deb
  http://ports.ubuntu.com/pool/universe/t/tiff/libtiff-opengl_3.8.2-11ub untu0.9.04.6_sparc.deb


• Ubuntu libtiff-tools_3.8.2-11ubuntu0.9.04.6_sparc.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiff-tools_3.8.2-11ubuntu0 .9.04.6_sparc.deb


• Ubuntu libtiff4-dev_3.8.2-11ubuntu0.9.04.6_sparc.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiff4-dev_3.8.2-11ubuntu0. 9.04.6_sparc.deb


• Ubuntu libtiff4_3.8.2-11ubuntu0.9.04.6_sparc.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiff4_3.8.2-11ubuntu0.9.04 .6_sparc.deb


• Ubuntu libtiffxx0c2_3.8.2-11ubuntu0.9.04.6_sparc.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiffxx0c2_3.8.2-11ubuntu0. 9.04.6_sparc.deb

Slackware Linux 13.1

• Slackware libtiff-3.9.4-i486-1_slack13.1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/ libtiff-3.9.4-i486-1_slack13.1.txz

Mandriva Linux Mandrake 2010.0

• Mandriva libtiff-devel-3.9.1-4.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libtiff-progs-3.9.1-4.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libtiff-static-devel-3.9.1-4.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libtiff3-3.9.1-4.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 9.04 powerpc

• Ubuntu libtiff-doc_3.8.2-11ubuntu0.9.04.6_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-doc_3.8.2-1 1ubuntu0.9.04.6_all.deb


• Ubuntu libtiff-opengl_3.8.2-11ubuntu0.9.04.6_powerpc.deb
  http://ports.ubuntu.com/pool/universe/t/tiff/libtiff-opengl_3.8.2-11ub untu0.9.04.6_powerpc.deb


• Ubuntu libtiff-tools_3.8.2-11ubuntu0.9.04.6_powerpc.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiff-tools_3.8.2-11ubuntu0 .9.04.6_powerpc.deb


• Ubuntu libtiff4-dev_3.8.2-11ubuntu0.9.04.6_powerpc.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiff4-dev_3.8.2-11ubuntu0. 9.04.6_powerpc.deb


• Ubuntu libtiff4_3.8.2-11ubuntu0.9.04.6_powerpc.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiff4_3.8.2-11ubuntu0.9.04 .6_powerpc.deb


• Ubuntu libtiffxx0c2_3.8.2-11ubuntu0.9.04.6_powerpc.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiffxx0c2_3.8.2-11ubuntu0. 9.04.6_powerpc.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

• Ubuntu libtiff-opengl_3.8.2-7ubuntu3.6_lpia.deb
  http://ports.ubuntu.com/pool/universe/t/tiff/libtiff-opengl_3.8.2-7ubu ntu3.6_lpia.deb


• Ubuntu libtiff-tools_3.8.2-7ubuntu3.6_lpia.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiff-tools_3.8.2-7ubuntu3. 6_lpia.deb


• Ubuntu libtiff4-dev_3.8.2-7ubuntu3.6_lpia.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiff4-dev_3.8.2-7ubuntu3.6 _lpia.deb


• Ubuntu libtiff4_3.8.2-7ubuntu3.6_lpia.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiff4_3.8.2-7ubuntu3.6_lpi a.deb


• Ubuntu libtiffxx0c2_3.8.2-7ubuntu3.6_lpia.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiffxx0c2_3.8.2-7ubuntu3.6 _lpia.deb

Ubuntu Ubuntu Linux 6.06 LTS i386

• Ubuntu libtiff-opengl_3.7.4-1ubuntu3.8_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/tiff/libtiff-opengl_ 3.7.4-1ubuntu3.8_i386.deb


• Ubuntu libtiff-tools_3.7.4-1ubuntu3.8_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-tools_3.7.4 -1ubuntu3.8_i386.deb


• Ubuntu libtiff4-dev_3.7.4-1ubuntu3.8_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4-dev_3.7.4- 1ubuntu3.8_i386.deb


• Ubuntu libtiff4_3.7.4-1ubuntu3.8_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4_3.7.4-1ubu ntu3.8_i386.deb


• Ubuntu libtiffxx0c2_3.7.4-1ubuntu3.8_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiffxx0c2_3.7.4- 1ubuntu3.8_i386.deb

Slackware Linux 13.0 x86_64

• Slackware libtiff-3.8.2-x86_64-4_slack13.0.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/package s/libtiff-3.8.2-x86_64-4_slack13.0.txz

Mandriva Linux Mandrake 2010.0 x86_64

• Mandriva lib64tiff-devel-3.9.1-4.1mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64tiff-static-devel-3.9.1-4.1mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64tiff3-3.9.1-4.1mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva libtiff-progs-3.9.1-4.1mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 6.06 LTS amd64

• Ubuntu libtiff-opengl_3.7.4-1ubuntu3.8_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/tiff/libtiff-opengl_ 3.7.4-1ubuntu3.8_amd64.deb


• Ubuntu libtiff-tools_3.7.4-1ubuntu3.8_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-tools_3.7.4 -1ubuntu3.8_amd64.deb


• Ubuntu libtiff4-dev_3.7.4-1ubuntu3.8_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4-dev_3.7.4- 1ubuntu3.8_amd64.deb


• Ubuntu libtiff4_3.7.4-1ubuntu3.8_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4_3.7.4-1ubu ntu3.8_amd64.deb


• Ubuntu libtiffxx0c2_3.7.4-1ubuntu3.8_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiffxx0c2_3.7.4- 1ubuntu3.8_amd64.deb

Slackware Linux 12.1

• Slackware libtiff-3.8.2-i486-4_slack12.1.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/ libtiff-3.8.2-i486-4_slack12.1.tgz

Ubuntu Ubuntu Linux 10.04 powerpc

• Ubuntu libtiff-doc_3.9.2-2ubuntu0.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-doc_3.9.2-2 ubuntu0.3_all.deb


• Ubuntu libtiff-opengl_3.9.2-2ubuntu0.3_powerpc.deb
  http://ports.ubuntu.com/pool/universe/t/tiff/libtiff-opengl_3.9.2-2ubu ntu0.3_powerpc.deb


• Ubuntu libtiff-tools_3.9.2-2ubuntu0.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiff-tools_3.9.2-2ubuntu0. 3_powerpc.deb


• Ubuntu libtiff4-dev_3.9.2-2ubuntu0.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiff4-dev_3.9.2-2ubuntu0.3 _powerpc.deb


• Ubuntu libtiff4_3.9.2-2ubuntu0.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiff4_3.9.2-2ubuntu0.3_pow erpc.deb


• Ubuntu libtiffxx0c2_3.9.2-2ubuntu0.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiffxx0c2_3.9.2-2ubuntu0.3 _powerpc.deb

Ubuntu Ubuntu Linux 9.04 i386

• Ubuntu libtiff-doc_3.8.2-11ubuntu0.9.04.6_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-doc_3.8.2-1 1ubuntu0.9.04.6_all.deb


• Ubuntu libtiff-opengl_3.8.2-11ubuntu0.9.04.6_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/tiff/libtiff-opengl_ 3.8.2-11ubuntu0.9.04.6_i386.deb


• Ubuntu libtiff-tools_3.8.2-11ubuntu0.9.04.6_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-tools_3.8.2 -11ubuntu0.9.04.6_i386.deb


• Ubuntu libtiff4-dev_3.8.2-11ubuntu0.9.04.6_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4-dev_3.8.2- 11ubuntu0.9.04.6_i386.deb


• Ubuntu libtiff4_3.8.2-11ubuntu0.9.04.6_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4_3.8.2-11ub untu0.9.04.6_i386.deb


• Ubuntu libtiffxx0c2_3.8.2-11ubuntu0.9.04.6_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiffxx0c2_3.8.2- 11ubuntu0.9.04.6_i386.deb

Mandriva Linux Mandrake 2010.1

• Mandriva libtiff-devel-3.9.2-2.1mdv2010.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libtiff-progs-3.9.2-2.1mdv2010.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libtiff-static-devel-3.9.2-2.1mdv2010.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libtiff3-3.9.2-2.1mdv2010.1.i586.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 9.04 lpia

• Ubuntu libtiff-doc_3.8.2-11ubuntu0.9.04.6_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-doc_3.8.2-1 1ubuntu0.9.04.6_all.deb


• Ubuntu libtiff-opengl_3.8.2-11ubuntu0.9.04.6_lpia.deb
  http://ports.ubuntu.com/pool/universe/t/tiff/libtiff-opengl_3.8.2-11ub untu0.9.04.6_lpia.deb


• Ubuntu libtiff-tools_3.8.2-11ubuntu0.9.04.6_lpia.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiff-tools_3.8.2-11ubuntu0 .9.04.6_lpia.deb


• Ubuntu libtiff4-dev_3.8.2-11ubuntu0.9.04.6_lpia.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiff4-dev_3.8.2-11ubuntu0. 9.04.6_lpia.deb


• Ubuntu libtiff4_3.8.2-11ubuntu0.9.04.6_lpia.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiff4_3.8.2-11ubuntu0.9.04 .6_lpia.deb


• Ubuntu libtiffxx0c2_3.8.2-11ubuntu0.9.04.6_lpia.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiffxx0c2_3.8.2-11ubuntu0. 9.04.6_lpia.deb

Ubuntu Ubuntu Linux 9.10 i386

• Ubuntu libtiff-doc_3.8.2-13ubuntu0.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-doc_3.8.2-1 3ubuntu0.3_all.deb


• Ubuntu libtiff-opengl_3.8.2-13ubuntu0.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/tiff/libtiff-opengl_ 3.8.2-13ubuntu0.3_i386.deb


• Ubuntu libtiff-tools_3.8.2-13ubuntu0.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-tools_3.8.2 -13ubuntu0.3_i386.deb


• Ubuntu libtiff4-dev_3.8.2-13ubuntu0.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4-dev_3.8.2- 13ubuntu0.3_i386.deb


• Ubuntu libtiff4_3.8.2-13ubuntu0.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4_3.8.2-13ub untu0.3_i386.deb


• Ubuntu libtiffxx0c2_3.8.2-13ubuntu0.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiffxx0c2_3.8.2- 13ubuntu0.3_i386.deb

Ubuntu Ubuntu Linux 10.04 amd64

• Ubuntu libtiff-doc_3.9.2-2ubuntu0.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-doc_3.9.2-2 ubuntu0.3_all.deb


• Ubuntu libtiff-opengl_3.9.2-2ubuntu0.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/tiff/libtiff-opengl_ 3.9.2-2ubuntu0.3_amd64.deb


• Ubuntu libtiff-tools_3.9.2-2ubuntu0.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-tools_3.9.2 -2ubuntu0.3_amd64.deb


• Ubuntu libtiff4-dev_3.9.2-2ubuntu0.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4-dev_3.9.2- 2ubuntu0.3_amd64.deb


• Ubuntu libtiff4_3.9.2-2ubuntu0.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4_3.9.2-2ubu ntu0.3_amd64.deb


• Ubuntu libtiffxx0c2_3.9.2-2ubuntu0.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiffxx0c2_3.9.2- 2ubuntu0.3_amd64.deb

Slackware Linux 13.0

• Slackware libtiff-3.8.2-i486-4_slack13.0.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/ libtiff-3.8.2-i486-4_slack13.0.txz

Ubuntu Ubuntu Linux 9.10 amd64

• Ubuntu libtiff-doc_3.8.2-13ubuntu0.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-doc_3.8.2-1 3ubuntu0.3_all.deb


• Ubuntu libtiff-opengl_3.8.2-13ubuntu0.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/tiff/libtiff-opengl_ 3.8.2-13ubuntu0.3_amd64.deb


• Ubuntu libtiff-tools_3.8.2-13ubuntu0.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-tools_3.8.2 -13ubuntu0.3_amd64.deb


• Ubuntu libtiff4-dev_3.8.2-13ubuntu0.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4-dev_3.8.2- 13ubuntu0.3_amd64.deb


• Ubuntu libtiff4_3.8.2-13ubuntu0.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4_3.8.2-13ub untu0.3_amd64.deb


• Ubuntu libtiffxx0c2_3.8.2-13ubuntu0.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiffxx0c2_3.8.2- 13ubuntu0.3_amd64.deb

Ubuntu Ubuntu Linux 8.04 LTS i386

• Ubuntu libtiff-opengl_3.8.2-7ubuntu3.6_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/tiff/libtiff-opengl_ 3.8.2-7ubuntu3.6_i386.deb


• Ubuntu libtiff-tools_3.8.2-7ubuntu3.6_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-tools_3.8.2 -7ubuntu3.6_i386.deb


• Ubuntu libtiff4-dev_3.8.2-7ubuntu3.6_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4-dev_3.8.2- 7ubuntu3.6_i386.deb


• Ubuntu libtiff4_3.8.2-7ubuntu3.6_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4_3.8.2-7ubu ntu3.6_i386.deb


• Ubuntu libtiffxx0c2_3.8.2-7ubuntu3.6_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiffxx0c2_3.8.2- 7ubuntu3.6_i386.deb

Ubuntu Ubuntu Linux 9.04 amd64

• Ubuntu libtiff-doc_3.8.2-11ubuntu0.9.04.6_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-doc_3.8.2-1 1ubuntu0.9.04.6_all.deb


• Ubuntu libtiff-opengl_3.8.2-11ubuntu0.9.04.6_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/tiff/libtiff-opengl_ 3.8.2-11ubuntu0.9.04.6_amd64.deb


• Ubuntu libtiff-tools_3.8.2-11ubuntu0.9.04.6_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-tools_3.8.2 -11ubuntu0.9.04.6_amd64.deb


• Ubuntu libtiff4-dev_3.8.2-11ubuntu0.9.04.6_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4-dev_3.8.2- 11ubuntu0.9.04.6_amd64.deb


• Ubuntu libtiff4_3.8.2-11ubuntu0.9.04.6_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4_3.8.2-11ub untu0.9.04.6_amd64.deb


• Ubuntu libtiffxx0c2_3.8.2-11ubuntu0.9.04.6_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiffxx0c2_3.8.2- 11ubuntu0.9.04.6_amd64.deb

Slackware Linux 11.0

• Slackware libtiff-3.8.2-i486-3_slack11.0.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/ libtiff-3.8.2-i486-3_slack11.0.tgz

Ubuntu Ubuntu Linux 10.04 sparc

• Ubuntu libtiff-doc_3.9.2-2ubuntu0.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-doc_3.9.2-2 ubuntu0.3_all.deb


• Ubuntu libtiff-opengl_3.9.2-2ubuntu0.3_sparc.deb
  http://ports.ubuntu.com/pool/universe/t/tiff/libtiff-opengl_3.9.2-2ubu ntu0.3_sparc.deb


• Ubuntu libtiff-tools_3.9.2-2ubuntu0.3_sparc.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiff-tools_3.9.2-2ubuntu0. 3_sparc.deb


• Ubuntu libtiff4-dev_3.9.2-2ubuntu0.3_sparc.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiff4-dev_3.9.2-2ubuntu0.3 _sparc.deb


• Ubuntu libtiff4_3.9.2-2ubuntu0.3_sparc.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiff4_3.9.2-2ubuntu0.3_spa rc.deb


• Ubuntu libtiffxx0c2_3.9.2-2ubuntu0.3_sparc.deb
  http://ports.ubuntu.com/pool/main/t/tiff/libtiffxx0c2_3.9.2-2ubuntu0.3 _sparc.deb

Ubuntu Ubuntu Linux 10.04 i386

• Ubuntu libtiff-doc_3.9.2-2ubuntu0.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-doc_3.9.2-2 ubuntu0.3_all.deb


• Ubuntu libtiff-opengl_3.9.2-2ubuntu0.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/t/tiff/libtiff-opengl_ 3.9.2-2ubuntu0.3_i386.deb


• Ubuntu libtiff-tools_3.9.2-2ubuntu0.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-tools_3.9.2 -2ubuntu0.3_i386.deb


• Ubuntu libtiff4-dev_3.9.2-2ubuntu0.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4-dev_3.9.2- 2ubuntu0.3_i386.deb


• Ubuntu libtiff4_3.9.2-2ubuntu0.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4_3.9.2-2ubu ntu0.3_i386.deb


• Ubuntu libtiffxx0c2_3.9.2-2ubuntu0.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiffxx0c2_3.9.2- 2ubuntu0.3_i386.deb

Slackware Linux 10.0

• Slackware libtiff-3.8.2-i486-2_slack10.0.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-10.0/patches/packages/ libtiff-3.8.2-i486-2_slack10.0.tgz

Slackware Linux 10.1

• Slackware libtiff-3.8.2-i486-2_slack10.1.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-10.1/patches/packages/ libtiff-3.8.2-i486-2_slack10.1.tgz

Slackware Linux 10.2

• Slackware libtiff-3.8.2-i486-2_slack10.2.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-10.2/patches/packages/ libtiff-3.8.2-i486-2_slack10.2.tgz

Slackware Linux 9.0

• Slackware libtiff-3.8.2-i386-2_slack9.0.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-9.0/patches/packages/l ibtiff-3.8.2-i386-2_slack9.0.tgz

Slackware Linux 9.1

• Slackware libtiff-3.8.2-i486-2_slack9.1.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-9.1/patches/packages/l ibtiff-3.8.2-i486-2_slack9.1.tgz

LibTIFF 'tif_dirread.c' SubjectDistance EXIF Tag Remote Stack Buffer Overflow Vulnerability

References:

• Description: fix SubjectDistance tag processing buffer overflow (CVE-2010-2067) (Frank Warmerdam)
  
• LibTIFF Homepage (LibTIFF)
  
• Research CVE-2010-2067 Stack overflow allowing arbitrary code execution (Dan Rosenberg)
  
• iDefense Security Advisory 06.21.10: Multiple Vendor LibTIFF 3.9.2 Stack Buffer (iDefense Labs )
  
• Multiple Vendor LibTIFF 3.9.2 Stack Buffer Overflow Vulnerability (iDefense Labs)