Lucene search

GoogleOSV:DSA-2744-1

HistoryAug 27, 2013 - 12:00 a.m.

tiff - several

2013-08-2700:00:00

Google

osv.dev

0.049 Low

EPSS

Percentile

92.8%

JSON

Pedro Ribeiro and Huzaifa S. Sidhpurwala discovered multiple
vulnerabilities in various tools shipped by the tiff library. Processing
a malformed file may lead to denial of service or the execution of
arbitrary code.

For the oldstable distribution (squeeze), these problems have been fixed in
version 3.9.4-5+squeeze10.

For the stable distribution (wheezy), these problems have been fixed in
version 4.0.2-6+deb7u2.

For the unstable distribution (sid), these problems have been fixed in
version 4.0.3-3.

We recommend that you upgrade your tiff packages.

CPENameOperatorVersion
tiffeq4.0.2-6
tiffeq4.0.2-6+deb7u1

CPE	Name	Operator	Version
	tiff	eq	4.0.2-6
	tiff	eq	4.0.2-6+deb7u1

References

www.debian.org/security/2013/dsa-2744

0.049 Low

EPSS

Percentile

92.8%

JSON

Related for OSV:DSA-2744-1