Pardus alert 2011-82 (tiff)

From:
    	     
 
Meltem Parmaksız <meltem@pardus.org.tr> 
To:
    	     
 
pardus-security@pardus.org.tr 
Subject:
    	     
 
[Pardus-security]  [PLSA 2011-82] Tiff: Integer Overflow 
Date:
    	     
 
Tue, 21 Jun 2011 16:07:01 +0300
Message-ID:
    	     
 
<201106211607.01641.meltem@pardus.org.tr>

------------------------------------------------------------------------
Pardus Linux Security Advisory 2011-82            security@pardus.org.tr
------------------------------------------------------------------------
      Date: 2011-06-03
  Severity: 3
      Type: Remote
------------------------------------------------------------------------

Summary
=======

A vulnerability has been fixed in tiff, which allows attackers to denial
of service. 


Description
===========

CVE-2010-4665: 

IInteger  overflow in  the  ReadDirectory  function  in  tiffdump.c  in 
tiffdump in LibTIFF before 3.9.5 allows remote  attackers  to  cause  a 
denial of service (application crash) or possibly have unspecified other
impact via a crafted TIFF file containing a  directory  data  structure 
with many directory entries. 



Affected packages:

  Pardus 2009:
    tiff, all before 3.8.2-18-13


Resolution
==========

There are update(s) for tiff. You can update them via Package Manager or
with a single command from console: 

    pisi up tiff

References
==========

  * http://bugs.pardus.org.tr/show_bug.cgi?id=18087

------------------------------------------------------------------------
_______________________________________________
Pardus-Security mailing list
Pardus-Security@pardus.org.tr
http://liste.pardus.org.tr/mailman/listinfo/pardus-security