Oracle Solaris Third-Party Patch Update : libtiff (cve_2013_4231_buffer_overflow)
Medium Nessus Plugin ID 80682
SynopsisThe remote Solaris system is missing a security patch for third-party software.
DescriptionThe remote Solaris system is missing necessary patches to address security updates :
- Multiple buffer overflows in libtiff before 4.0.3 allow remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1) extension block in a GIF image or (2) GIF raster image to tools/gif2tiff.c or (3) a long filename for a TIFF image to tools/rgb2ycbcr.c. NOTE: vectors 1 and 3 are disputed by Red Hat, which states that the input cannot exceed the allocated buffer size. (CVE-2013-4231)
- Use-after-free vulnerability in the t2p_readwrite_pdf_image function in tools/ tiff2pdf.c in libtiff 4.0.3 allows remote attackers to cause a denial of service (crash) or possible execute arbitrary code via a crafted TIFF image. (CVE-2013-4232)
SolutionUpgrade to Solaris 188.8.131.52.0.