Multiple issues were discovered in the TIFF tools, a set of utilities for TIFF image file manipulation and conversion.

  - CVE-2013-1960     Emmanuel Bouillon discovered a heap-based buffer     overflow in the tp_process_jpeg_strip function in the     tiff2pdf tool. This could potentially lead to a crash or     arbitrary code execution.

  - CVE-2013-1961     Emmanuel Bouillon discovered many stack-based buffer     overflows in the TIFF tools. These issues could     potentially lead to a crash or arbitrary code execution.

Repair minor security issues CVE-2013-1960, CVE-2013-1961

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

libtiff security update :

  - CVE-2013-1961.patch [bnc#818117]

  - CVE-2013-1960.patch [bnc#817573]

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0223 advisory.

    [3.8.2-19]
    - Resolves: #1063460 CVE-2013-1960 CVE-2013-1961 CVE-2013-4231 CVE-2013-4232 CVE-2013-4243 CVE-2013-4244       libtiff various flaws

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

A heap-based buffer overflow and a use-after-free flaw were found in the tiff2pdf tool. An attacker could use these flaws to create a specially crafted TIFF file that would cause tiff2pdf to crash or, possibly, execute arbitrary code. (CVE-2013-1960, CVE-2013-4232)

Multiple buffer overflow flaws were found in the gif2tiff tool. An attacker could use these flaws to create a specially crafted GIF file that could cause gif2tiff to crash or, possibly, execute arbitrary code. (CVE-2013-4231, CVE-2013-4243, CVE-2013-4244)

Multiple buffer overflow flaws were found in the tiff2pdf tool. An attacker could use these flaws to create a specially crafted TIFF file that would cause tiff2pdf to crash. (CVE-2013-1961)

All running applications linked against libtiff must be restarted for this update to take effect.

The remote Solaris system is missing necessary patches to address security updates :

  - ppm2tiff does not check the return value of the     TIFFScanlineSize function, which allows remote attackers     to cause a denial of service (crash) and possibly     execute arbitrary code via a crafted PPM image that     triggers an integer overflow, a zero-memory allocation,     and a heap-based buffer overflow. (CVE-2012-4564)

  - Heap-based buffer overflow in the t2p_process_jpeg_strip     function in tiff2pdf in libtiff 4.0.3 and earlier allows     remote attackers to cause a denial of service (crash)     and possibly execute arbitrary code via a crafted TIFF     image file. (CVE-2013-1960)

  - Stack-based buffer overflow in the t2p_write_pdf_page     function in tiff2pdf in libtiff before 4.0.3 allows     remote attackers to cause a denial of service     (application crash) via a crafted image length and     resolution in a TIFF image file. (CVE-2013-1961)

New libtiff packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, 14.0, and -current to fix security issues.

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-199:01 advisory.

    The libtiff package contains a library of functions for manipulating TIFF (Tagged Image File Format) image     format files. TIFF is a widely used file format for bitmapped images. TIFF files usually end in the .tif     extension and they are often quite large.
    The libtiff package should be installed if you need to manipulate TIFF format image files.
    Security issues fixed with this release:
     CVE-2010-2596     The OJPEGPostDecode function in tif_ojpeg.c in LibTIFF 3.9.0 and 3.9.2, as used in tiff2ps, allows remote     attackers to cause a denial of service (assertion failure and application exit) via a crafted TIFF image,     related to downsampled OJPEG input.
     CVE-2013-1960     Heap-based buffer overflow in the t2p_process_jpeg_strip function in tiff2pdf in libtiff 4.0.3 and earlier     allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a     crafted TIFF image file.
     CVE-2013-1961     Stack-based buffer overflow in the t2p_write_pdf_page function in tiff2pdf in libtiff before 4.0.3 allows     remote attackers to cause a denial of service (application crash) via a crafted image length and     resolution in a TIFF image file.
     CVE-2013-4231     Multiple buffer overflows in libtiff before 4.0.3 allow remote attackers to cause a denial of service     (out-of-bounds write) via a crafted (1) extension block in a GIF image or (2) GIF raster image to     tools/gif2tiff.c or (3) a long filename for a TIFF image to tools/rgb2ycbcr.c. NOTE: vectors 1 and 3 are     disputed by Red Hat, which states that the input cannot exceed the allocated buffer size.
     CVE-2013-4232     Use-after-free vulnerability in the t2p_readwrite_pdf_image function in tools/tiff2pdf.c in libtiff 4.0.3     allows remote attackers to cause a denial of service (crash) or possible execute arbitrary code via a     crafted TIFF image.
     CVE-2013-4243     Heap-based buffer overflow in the readgifimage function in the gif2tiff tool in libtiff 4.0.3 and earlier     allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a     crafted height and width values in a GIF image.
     CVE-2013-4244     The LZW decompressor in the gif2tiff tool in libtiff 4.0.3 and earlier allows context-dependent attackers     to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a     crafted GIF image.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
66916	Debian DSA-2698-1 : tiff - buffer overflow	Nessus	Debian Local Security Checks	2013/6/19	2021/1/11	high
66368	Fedora 19 : libtiff-4.0.3-6.fc19 (2013-7339)	Nessus	Fedora Local Security Checks	2013/5/10	2021/1/11	high
75005	openSUSE Security Update : tiff (openSUSE-SU-2013:0944-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	high
72735	Oracle Linux 5 : libtiff (ELSA-2014-0223)	Nessus	Oracle Linux Local Security Checks	2014/2/28	2025/4/29	critical
72738	Scientific Linux Security Update : libtiff on SL5.x i386/x86_64 (20140227)	Nessus	Scientific Linux Local Security Checks	2014/2/28	2021/1/14	high
80681	Oracle Solaris Third-Party Patch Update : libtiff (cve_2012_4564_design_error1)	Nessus	Solaris Local Security Checks	2015/1/19	2021/1/14	high
70499	Slackware 12.1 / 12.2 / 13.0 / 13.1 / 13.37 / 14.0 / current : libtiff (SSA:2013-290-01)	Nessus	Slackware Local Security Checks	2013/10/20	2021/1/14	high
289891	MiracleLinux 4 : libtiff-3.9.4-10.AXS4 (AXSA:2014-199:01)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	critical

检测

插件搜索

high

high

high

critical

high

high

high

critical