From b6fa2d612e3ca7d5d1c106a935e3e6f0c51e719d Mon Sep 17 00:00:00 2001 From: Jacques Vidrine Date: Wed, 13 Oct 2004 20:39:47 +0000 Subject: [PATCH] Document integer overflows in libtiff. --- security/vuxml/vuln.xml | 25 +++++++++++++++++++++++++ 1 file changed, 25 insertions(+) diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index d119ffe226be..24fce608591d 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -32,6 +32,31 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. --> + + tiff -- multiple integer overflows + + + tiff + 3.6.1_2 + + + + +

Dmitry V. Levin discovered numerous integer overflow bugs in + libtiff. Most of these bugs are related to memory management, + and are believed to be exploitable for arbitrary code + execution.

+ + + + CAN-2004-0886 + + + 2004-10-13 + 2004-10-13 + + + CUPS -- local information disclosure