Description
LibTIFF before 3.9.2-5.2.1 in SUSE openSUSE 11.3 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted TIFF image.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | tiff | 3.9.4-5 | — |
| Debian 13 | tiff | 3.9.4-5 | — |
| Debian 12 | tiff | 3.9.4-5 | — |
References
- https://bugzilla.novell.com/show_bug.cgi?id=624215
- http://blackberry.com/btsc/KB27244
- GLSA-201209-02 vendor-advisory
- SUSE-SR:2010:017 vendor-advisory
- http://support.novell.com/security/cve/CVE-2010-3087.html
- 50726 third-party-advisory