Debian DSA-2552-1 : tiff - several vulnerabilities

high Nessus Plugin ID 62317

Language:

Synopsis

The remote Debian host is missing a security-related update.

Description

Several vulnerabilities were discovered in TIFF, a library set and tools to support the Tag Image File Format (TIFF), allowing denial of service and potential privilege escalation.

These vulnerabilities can be exploited via a specially crafted TIFF image.

- CVE-2012-2113 The tiff2pdf utility has an integer overflow error when parsing images.

- CVE-2012-3401 Huzaifa Sidhpurwala discovered heap-based buffer overflow in the t2p_read_tiff_init() function.

- CVE-2010-2482 An invalid td_stripbytecount field is not properly handle and can trigger a NULL pointer dereference.

- CVE-2010-2595 An array index error, related to 'downsampled OJPEG input' in the TIFFYCbCrtoRGB function causes an unexpected crash.

- CVE-2010-2597 Also related to 'downsampled OJPEG input', the TIFFVStripSize function crash unexpectly.

- CVE-2010-2630 The TIFFReadDirectory function does not properly validate the data types of codec-specific tags that have an out-of-order position in a TIFF file.

- CVE-2010-4665 The tiffdump utility has an integer overflow in the ReadDirectory function.

Solution

Upgrade the tiff packages.

For the stable distribution (squeeze), these problems have been fixed in version 3.9.4-5+squeeze5.

Plugin Details

Severity: High

ID: 62317

File Name: debian_DSA-2552.nasl

Version: 1.13

Type: local

Agent: unix

Family: Debian Local Security Checks

Published: 9/27/2012

Updated: 1/11/2021

Supported Sensors: Agentless Assessment, Frictionless Assessment Agent, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.9

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: p-cpe:/a:debian:debian_linux:tiff, cpe:/o:debian:debian_linux:6.0

Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 9/26/2012

Reference Information

CVE: CVE-2010-2482, CVE-2010-2595, CVE-2010-2597, CVE-2010-2630, CVE-2010-4665, CVE-2012-2088, CVE-2012-2113, CVE-2012-3401

BID: 41088, 41295, 41475, 41480, 47338, 54076, 54601

DSA: 2552

Detections

Analytics