FreeBSD : tiff -- directory entry count integer overflow vulnerability (fc7e6a42-6012-11d9-a9e7-0001020eed82)

Critical Nessus Plugin ID 19184


The remote FreeBSD host is missing one or more security-related updates.


In an iDEFENSE Security Advisory infamous41md reports :

Remote exploitation of a heap-based buffer overflow vulnerability within the LibTIFF package could allow attackers to execute arbitrary code.

The vulnerability specifically exists due to insufficient validation of user-supplied data when calculating the size of a directory entry.
A TIFF file includes a number of directory entry header fields that describe the data in the file. Included in these entries is an entry count and offset value that are calculated to determine the size and location of the data for that entry.


Update the affected packages.

See Also

Plugin Details

Severity: Critical

ID: 19184

File Name: freebsd_pkg_fc7e6a42601211d9a9e70001020eed82.nasl

Version: $Revision: 1.20 $

Type: local

Published: 2005/07/13

Modified: 2013/06/22

Dependencies: 12634

Risk Information

Risk Factor: Critical


Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:fractorama, p-cpe:/a:freebsd:freebsd:gdal, p-cpe:/a:freebsd:freebsd:iv, p-cpe:/a:freebsd:freebsd:ivtools, p-cpe:/a:freebsd:freebsd:ja-iv, p-cpe:/a:freebsd:freebsd:ja-libimg, p-cpe:/a:freebsd:freebsd:linux-tiff, p-cpe:/a:freebsd:freebsd:paraview, p-cpe:/a:freebsd:freebsd:pdflib, p-cpe:/a:freebsd:freebsd:pdflib-perl, p-cpe:/a:freebsd:freebsd:tiff, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Exploit Available: false

Exploit Ease: No known exploits are available

Patch Publication Date: 2005/01/06

Vulnerability Publication Date: 2004/12/17

Reference Information

CVE: CVE-2004-1308

BID: 12075

CERT: 125598