• info
• discussion
• exploit
• solution
• references

LibTiff TIFFToRGB Denial of Service Vulnerability

Solution:
These issues have been addressed in version 3.8.1 and later.

Please see the referenced vendor advisories for further information.


LibTIFF LibTIFF 3.4

• LibTIFF tiff-3.8.2.tar.gz
  ftp://ftp.remotesensing.org/pub/libtiff/tiff-3.8.2.tar.gz

LibTIFF LibTIFF 3.5.1

• LibTIFF tiff-3.8.2.tar.gz
  ftp://ftp.remotesensing.org/pub/libtiff/tiff-3.8.2.tar.gz

LibTIFF LibTIFF 3.5.2

• LibTIFF tiff-3.8.2.tar.gz
  ftp://ftp.remotesensing.org/pub/libtiff/tiff-3.8.2.tar.gz

LibTIFF LibTIFF 3.5.3

• LibTIFF tiff-3.8.2.tar.gz
  ftp://ftp.remotesensing.org/pub/libtiff/tiff-3.8.2.tar.gz

LibTIFF LibTIFF 3.5.4

• LibTIFF tiff-3.8.2.tar.gz
  ftp://ftp.remotesensing.org/pub/libtiff/tiff-3.8.2.tar.gz

LibTIFF LibTIFF 3.5.5

• LibTIFF tiff-3.8.2.tar.gz
  ftp://ftp.remotesensing.org/pub/libtiff/tiff-3.8.2.tar.gz


• Mandriva libtiff-3.5.7-11.9.M20mdk.src.rpm
  Multi Network Firewall 2.0:
  http://www.mandriva.com/en/download


• Mandriva libtiff3-3.5.7-11.9.M20mdk.i586.rpm
  Multi Network Firewall 2.0:
  http://www.mandriva.com/en/download

LibTIFF LibTIFF 3.5.7

• LibTIFF tiff-3.8.2.tar.gz
  ftp://ftp.remotesensing.org/pub/libtiff/tiff-3.8.2.tar.gz


• Mandriva lib64tiff3-3.5.7-11.9.C30mdk.x86_64.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva lib64tiff3-devel-3.5.7-11.9.C30mdk.x86_64.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva lib64tiff3-static-devel-3.5.7-11.9.C30mdk.x86_64.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva libtiff-3.5.7-11.9.C30mdk.src.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva libtiff-progs-3.5.7-11.9.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva libtiff-progs-3.5.7-11.9.C30mdk.x86_64.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva libtiff3-3.5.7-11.9.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva libtiff3-devel-3.5.7-11.9.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download


• Mandriva libtiff3-static-devel-3.5.7-11.9.C30mdk.i586.rpm
  Corporate 3.0:
  http://www.mandriva.com/en/download

LibTIFF LibTIFF 3.6 .0

• LibTIFF tiff-3.8.2.tar.gz
  ftp://ftp.remotesensing.org/pub/libtiff/tiff-3.8.2.tar.gz

LibTIFF LibTIFF 3.6.1

• LibTIFF tiff-3.8.2.tar.gz
  ftp://ftp.remotesensing.org/pub/libtiff/tiff-3.8.2.tar.gz


• Mandriva lib64tiff3-3.6.1-11.3.102mdk.x86_64.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva lib64tiff3-devel-3.6.1-11.3.102mdk.x86_64.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva lib64tiff3-static-devel-3.6.1-11.3.102mdk.x86_64.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva libtiff-3.6.1-11.3.102mdk.src.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva libtiff-progs-3.6.1-11.3.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva libtiff-progs-3.6.1-11.3.102mdk.x86_64.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva libtiff3-3.6.1-11.3.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva libtiff3-devel-3.6.1-11.3.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva libtiff3-static-devel-3.6.1-11.3.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download

LibTIFF LibTIFF 3.7

• LibTIFF tiff-3.8.2.tar.gz
  ftp://ftp.remotesensing.org/pub/libtiff/tiff-3.8.2.tar.gz

LibTIFF LibTIFF 3.7.1

• LibTIFF tiff-3.8.2.tar.gz
  ftp://ftp.remotesensing.org/pub/libtiff/tiff-3.8.2.tar.gz

LibTIFF LibTIFF 3.7.2

• Debian libtiff-opengl_3.7.2-4_alpha.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-4_alpha.deb


• Debian libtiff-opengl_3.7.2-4_amd64.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-4_amd64.deb


• Debian libtiff-opengl_3.7.2-4_arm.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-4_arm.deb


• Debian libtiff-opengl_3.7.2-4_hppa.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-4_hppa.deb


• Debian libtiff-opengl_3.7.2-4_i386.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-4_i386.deb


• Debian libtiff-opengl_3.7.2-4_ia64.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-4_ia64.deb


• Debian libtiff-opengl_3.7.2-4_m68k.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-4_m68k.deb


• Debian libtiff-opengl_3.7.2-4_mips.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-4_mips.deb


• Debian libtiff-opengl_3.7.2-4_mipsel.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-4_mipsel.deb


• Debian libtiff-opengl_3.7.2-4_powerpc.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-4_powerpc.deb


• Debian libtiff-opengl_3.7.2-4_s390.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-4_s390.deb


• Debian libtiff-opengl_3.7.2-4_sparc.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff-opengl_3.7 .2-4_sparc.deb


• Debian libtiff-tools_3.7.2-4_alpha.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-4_alpha.deb


• Debian libtiff-tools_3.7.2-4_amd64.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-4_amd64.deb


• Debian libtiff-tools_3.7.2-4_arm.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-4_arm.deb


• Debian libtiff-tools_3.7.2-4_hppa.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-4_hppa.deb


• Debian libtiff-tools_3.7.2-4_i386.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-4_i386.deb


• Debian libtiff-tools_3.7.2-4_ia64.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-4_ia64.deb


• Debian libtiff-tools_3.7.2-4_m68k.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-4_m68k.deb


• Debian libtiff-tools_3.7.2-4_mips.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-4_mips.deb


• Debian libtiff-tools_3.7.2-4_mipsel.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-4_mipsel.deb


• Debian libtiff-tools_3.7.2-4_powerpc.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-4_powerpc.deb


• Debian libtiff-tools_3.7.2-4_s390.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-4_s390.deb


• Debian libtiff-tools_3.7.2-4_sparc.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.7. 2-4_sparc.deb


• Debian libtiff4-dev_3.7.2-4_alpha.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -4_alpha.deb


• Debian libtiff4-dev_3.7.2-4_amd64.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -4_amd64.deb


• Debian libtiff4-dev_3.7.2-4_arm.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -4_arm.deb


• Debian libtiff4-dev_3.7.2-4_hppa.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -4_hppa.deb


• Debian libtiff4-dev_3.7.2-4_i386.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -4_i386.deb


• Debian libtiff4-dev_3.7.2-4_ia64.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -4_ia64.deb


• Debian libtiff4-dev_3.7.2-4_m68k.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -4_m68k.deb


• Debian libtiff4-dev_3.7.2-4_mips.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -4_mips.deb


• Debian libtiff4-dev_3.7.2-4_mipsel.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -4_mipsel.deb


• Debian libtiff4-dev_3.7.2-4_powerpc.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -4_powerpc.deb


• Debian libtiff4-dev_3.7.2-4_s390.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -4_s390.deb


• Debian libtiff4-dev_3.7.2-4_sparc.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff4-dev_3.7.2 -4_sparc.deb


• Debian libtiff4_3.7.2-4_alpha.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-4_a lpha.deb


• Debian libtiff4_3.7.2-4_amd64.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-4_a md64.deb


• Debian libtiff4_3.7.2-4_arm.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-4_a rm.deb


• Debian libtiff4_3.7.2-4_hppa.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-4_h ppa.deb


• Debian libtiff4_3.7.2-4_i386.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-4_i 386.deb


• Debian libtiff4_3.7.2-4_ia64.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-4_i a64.deb


• Debian libtiff4_3.7.2-4_m68k.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-4_m 68k.deb


• Debian libtiff4_3.7.2-4_mips.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-4_m ips.deb


• Debian libtiff4_3.7.2-4_mipsel.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-4_m ipsel.deb


• Debian libtiff4_3.7.2-4_powerpc.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-4_p owerpc.deb


• Debian libtiff4_3.7.2-4_s390.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-4_s 390.deb


• Debian libtiff4_3.7.2-4_sparc.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiff4_3.7.2-4_s parc.deb


• Debian libtiffxx0_3.7.2-4_alpha.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-4 _alpha.deb


• Debian libtiffxx0_3.7.2-4_amd64.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-4 _amd64.deb


• Debian libtiffxx0_3.7.2-4_arm.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-4 _arm.deb


• Debian libtiffxx0_3.7.2-4_hppa.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-4 _hppa.deb


• Debian libtiffxx0_3.7.2-4_i386.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-4 _i386.deb


• Debian libtiffxx0_3.7.2-4_ia64.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-4 _ia64.deb


• Debian libtiffxx0_3.7.2-4_m68k.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-4 _m68k.deb


• Debian libtiffxx0_3.7.2-4_mips.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-4 _mips.deb


• Debian libtiffxx0_3.7.2-4_mipsel.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-4 _mipsel.deb


• Debian libtiffxx0_3.7.2-4_powerpc.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-4 _powerpc.deb


• Debian libtiffxx0_3.7.2-4_s390.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-4 _s390.deb


• Debian libtiffxx0_3.7.2-4_sparc.deb
  http://security.debian.org/pool/updates/main/t/tiff/libtiffxx0_3.7.2-4 _sparc.deb


• LibTIFF tiff-3.8.2.tar.gz
  ftp://ftp.remotesensing.org/pub/libtiff/tiff-3.8.2.tar.gz

LibTIFF LibTIFF 3.8

• LibTIFF tiff-3.8.2.tar.gz
  ftp://ftp.remotesensing.org/pub/libtiff/tiff-3.8.2.tar.gz