Create an account

Subscribe to LWN

LWN.net Weekly Edition for May 23, 2013

An "enum" for Python 3

An unexpected perf feature

LWN.net Weekly Edition for May 16, 2013

A look at the PyPy 2.0 release

Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

tiff: code execution

Package(s):

tiff

CVE #(s):

CVE-2012-4447

Created:

October 22, 2012

Updated:

December 31, 2012

Description:

From the Debian advisory:

It was discovered that a buffer overflow in libtiff's parsing of files using PixarLog compression could lead to the execution of arbitrary code.

Alerts:

Debian	DSA-2561-1	2012-10-21
Mageia	MGASA-2012-0317	2012-10-29
Ubuntu	USN-1631-1	2012-11-15
Mandriva	MDVSA-2012:174	2012-11-22
Red Hat	RHSA-2012:1590-01	2012-12-18
CentOS	CESA-2012:1590	2012-12-19
CentOS	CESA-2012:1590	2012-12-19
Oracle	ELSA-2012-1590	2012-12-18
Oracle	ELSA-2012-1590	2012-12-19
Scientific Linux	SL-libt-20121219	2012-12-19
Fedora	FEDORA-2012-20446	2012-12-31
Fedora	FEDORA-2012-20404	2012-12-31
openSUSE	openSUSE-SU-2013:0187-1	2013-01-23
Mandriva	MDVSA-2013:046	2013-04-05

(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds