Mandriva Linux Security Advisory : libtiff (MDVSA-2008:184)
Medium Nessus Plugin ID 37814
SynopsisThe remote Mandriva Linux host is missing one or more security updates.
DescriptionDrew Yao of the Apple Product Security Team reported multiple uses of uninitialized values in libtiff's LZW compression algorithm decoder.
An attacker could create a carefully crafted LZW-encoded TIFF file that would cause an application linked to libtiff to crash or potentially execute arbitrary code (CVE-2008-2327).
The updated packages have been patched to prevent this issue.
SolutionUpdate the affected packages.