mirror of
https://git.FreeBSD.org/ports.git
synced 2024-11-30 01:15:52 +00:00
Document integer overflows in libtiff.
This commit is contained in:
parent
8dd8e02aff
commit
b6fa2d612e
Notes:
svn2git
2021-03-31 03:12:20 +00:00
svn path=/head/; revision=119303
@ -32,6 +32,31 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
|
||||
-->
|
||||
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
|
||||
<vuln vid="3897a2f8-1d57-11d9-bc4a-000c41e2cdad">
|
||||
<topic>tiff -- multiple integer overflows</topic>
|
||||
<affects>
|
||||
<package>
|
||||
<name>tiff</name>
|
||||
<range><le>3.6.1_2</le></range>
|
||||
</package>
|
||||
</affects>
|
||||
<description>
|
||||
<body xmlns="http://www.w3.org/1999/xhtml">
|
||||
<p>Dmitry V. Levin discovered numerous integer overflow bugs in
|
||||
libtiff. Most of these bugs are related to memory management,
|
||||
and are believed to be exploitable for arbitrary code
|
||||
execution.</p>
|
||||
</body>
|
||||
</description>
|
||||
<references>
|
||||
<cvename>CAN-2004-0886</cvename>
|
||||
</references>
|
||||
<dates>
|
||||
<discovery>2004-10-13</discovery>
|
||||
<entry>2004-10-13</entry>
|
||||
</dates>
|
||||
</vuln>
|
||||
|
||||
<vuln vid="30cea6be-1d0c-11d9-814e-0001020eed82">
|
||||
<topic>CUPS -- local information disclosure</topic>
|
||||
<affects>
|
||||
|
Loading…
Reference in New Issue
Block a user