OSVDB ID: 27729

Title: LibTIFF Custom Tag Support Unspecified Issue

Info

Disclosure

Aug 02, 2006

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

LibTIFF contains an unspecified local overflow related to custom tag support in the TIFF library that may allow an attacker to execute arbitrary code. No further details have been provided.

Classification

Location: Local Access Required, Location Unknown
Attack Type: Input Manipulation, Attack Type Unknown
Impact: Loss of Integrity
Exploit: Exploit Unknown
Disclosure: OSVDB Verified

Solution

Upgrade to version 3.8.2 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Sam Leffler

libtiff

3.5.x
3.6.x
3.7.x
3.8.0
3.8.1

References

Credit

  • Tavis Ormandy - Gentoo Linux Auditing Team


Direct URL: http://osvdb.org/27729