Multiple vulnerabilities has been discovered and corrected in libtiff :

libtiff did not properly convert between signed and unsigned integer values, leading to a buffer overflow. An attacker could use this flaw to create a specially crafted TIFF file that, when opened, would cause an application linked against libtiff to crash or, possibly, execute arbitrary code (CVE-2012-2088).

Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in the tiff2pdf tool. An attacker could use these flaws to create a specially crafted TIFF file that would cause tiff2pdf to crash or, possibly, execute arbitrary code (CVE-2012-2113).

The updated packages have been patched to correct these issues.

The following issue has been fixed :

  - Specially crafted tiff files could have caused overflows     in libtiff. (CVE-2012-2088 / CVE-2012-2113)

The mobile device is running a version of iOS that is prior to version 7.1. It is, therefore, affected by vulnerabilities in the following components :

  - Backup
  - Certificate Trust Policy
  - Configuration Profiles
  - CoreCapture
  - Crash Reporting
  - dyld
  - FaceTime
  - ImageIO
  - IOKit HID Event
  - iTunes Store
  - Kernel
  - Office Viewer
  - Photos Backend
  - Profiles
  - Safari
  - Settings - Accounts
  - Springboard
  - SpringBoard Lock Screen
  - TelephonyUI Framework
  - USB Host
  - Video Driver
  - WebKit

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
59843	Mandriva Linux Security Advisory : libtiff (MDVSA-2012:101)	Nessus	Mandriva Local Security Checks	2012/7/5	2021/1/6	high
60077	SuSE 10 Security Update : libtiff (ZYPP Patch Number 8199)	Nessus	SuSE Local Security Checks	2012/7/20	2021/1/19	high
64197	SuSE 11.1 Security Update : libtiff (SAT Patch Number 6475)	Nessus	SuSE Local Security Checks	2013/1/25	2021/1/19	high
72907	Apple iOS < 7.1 Multiple Vulnerabilities	Nessus	Mobile Devices	2014/3/10	2026/8/10	high

检测

插件搜索

high

high

high

high