USN-1498-1 : tiff vulnerabilities

NASLDB: USN-1498-1 : tiff vulnerabilities

General

ID: 59856
Name: USN-1498-1 : tiff vulnerabilities

Summary: Checks dpkg output for updated package(s)

Credits: –

Classification

Risk: –

CVSS: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS Base Vector: –
CVSS Temporal Vector: –

Port: 0
Family: Ubuntu Local Security Checks
Type: Local

Description

It was discovered that the TIFF library incorrectly handled certain
malformed TIFF images. If a user or automated system were tricked
into opening a specially crafted TIFF image, a remote attacker could
crash the application, leading to a denial of service, or possibly
execute arbitrary code with user privileges. (CVE-2012-2088)

It was discovered that the tiff2pdf utility incorrectly handled
certain malformed TIFF images. If a user or automated system were
tricked into opening a specially crafted TIFF image, a remote
attacker could crash the application, leading to a denial of service,
or possibly execute arbitrary code with user privileges.
(CVE-2012-2113)