libTIFF: Multiple buffer overflows — GLSA 200607-03

libTIFF contains buffer overflows that could result in arbitrary code execution.

Affected packages

Background

libTIFF provides support for reading and manipulating TIFF images.

Description

A buffer overflow has been found in the t2p_write_pdf_string function in tiff2pdf, which can been triggered with a TIFF file containing a DocumentName tag with UTF-8 characters. An additional buffer overflow has been found in the handling of the parameters in tiffsplit.

Impact

A remote attacker could entice a user to load a specially crafted TIFF file, resulting in the possible execution of arbitrary code.

Workaround

There is no known workaround at this time.

Resolution

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=media-libs/tiff-3.8.2-r1"

References

• CVE-2006-2193
• CVE-2006-2656

Release date
July 09, 2006

Latest revision
July 09, 2006: 01

Severity
normal

Exploitable
remote

Bugzilla entries

• 135881