• info
• discussion
• exploit
• solution
• references

LibTIFF TIFFOpen Buffer Overflow Vulnerability

Solution:
Please see the referenced vendor advisories for further information on obtaining and applying the appropriate updates.


LibTIFF LibTIFF 3.4

• LibTIFF tif_dirread.c
  http://bugzilla.remotesensing.org/attachment.cgi?id=238

LibTIFF LibTIFF 3.5.1

• LibTIFF tif_dirread.c
  http://bugzilla.remotesensing.org/attachment.cgi?id=238

LibTIFF LibTIFF 3.5.2

• LibTIFF tif_dirread.c
  http://bugzilla.remotesensing.org/attachment.cgi?id=238

LibTIFF LibTIFF 3.5.3

• LibTIFF tif_dirread.c
  http://bugzilla.remotesensing.org/attachment.cgi?id=238

LibTIFF LibTIFF 3.5.4

• LibTIFF tif_dirread.c
  http://bugzilla.remotesensing.org/attachment.cgi?id=238

LibTIFF LibTIFF 3.5.5

• Debian libtiff-tools_3.5.5-7_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.5. 5-7_alpha.deb


• Debian libtiff-tools_3.5.5-7_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.5. 5-7_arm.deb


• Debian libtiff-tools_3.5.5-7_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.5. 5-7_hppa.deb


• Debian libtiff-tools_3.5.5-7_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.5. 5-7_i386.deb


• Debian libtiff-tools_3.5.5-7_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.5. 5-7_ia64.deb


• Debian libtiff-tools_3.5.5-7_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.5. 5-7_m68k.deb


• Debian libtiff-tools_3.5.5-7_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.5. 5-7_mips.deb


• Debian libtiff-tools_3.5.5-7_mipsel.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.5. 5-7_mipsel.deb


• Debian libtiff-tools_3.5.5-7_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.5. 5-7_powerpc.deb


• Debian libtiff-tools_3.5.5-7_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.5. 5-7_s390.deb


• Debian libtiff-tools_3.5.5-7_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/t/tiff/libtiff-tools_3.5. 5-7_sparc.deb


• Debian libtiff3g-dev_3.5.5-7_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/t/tiff/libtiff3g-dev_3.5. 5-7_alpha.deb


• Debian libtiff3g-dev_3.5.5-7_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/t/tiff/libtiff3g-dev_3.5. 5-7_arm.deb


• Debian libtiff3g-dev_3.5.5-7_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/t/tiff/libtiff3g-dev_3.5. 5-7_hppa.deb


• Debian libtiff3g-dev_3.5.5-7_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/t/tiff/libtiff3g-dev_3.5. 5-7_i386.deb


• Debian libtiff3g-dev_3.5.5-7_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/t/tiff/libtiff3g-dev_3.5. 5-7_ia64.deb


• Debian libtiff3g-dev_3.5.5-7_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/t/tiff/libtiff3g-dev_3.5. 5-7_m68k.deb


• Debian libtiff3g-dev_3.5.5-7_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/t/tiff/libtiff3g-dev_3.5. 5-7_mips.deb


• Debian libtiff3g-dev_3.5.5-7_mipsel.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/t/tiff/libtiff3g-dev_3.5. 5-7_mipsel.deb


• Debian libtiff3g-dev_3.5.5-7_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/t/tiff/libtiff3g-dev_3.5. 5-7_powerpc.deb


• Debian libtiff3g-dev_3.5.5-7_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/t/tiff/libtiff3g-dev_3.5. 5-7_s390.deb


• Debian libtiff3g-dev_3.5.5-7_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/t/tiff/libtiff3g-dev_3.5. 5-7_sparc.deb


• Debian libtiff3g_3.5.5-7_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/t/tiff/libtiff3g_3.5.5-7_ alpha.deb


• Debian libtiff3g_3.5.5-7_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/t/tiff/libtiff3g_3.5.5-7_ arm.deb


• Debian libtiff3g_3.5.5-7_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/t/tiff/libtiff3g_3.5.5-7_ hppa.deb


• Debian libtiff3g_3.5.5-7_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/t/tiff/libtiff3g_3.5.5-7_ i386.deb


• Debian libtiff3g_3.5.5-7_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/t/tiff/libtiff3g_3.5.5-7_ ia64.deb


• Debian libtiff3g_3.5.5-7_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/t/tiff/libtiff3g_3.5.5-7_ m68k.deb


• Debian libtiff3g_3.5.5-7_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/t/tiff/libtiff3g_3.5.5-7_ mips.deb


• Debian libtiff3g_3.5.5-7_mipsel.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/t/tiff/libtiff3g_3.5.5-7_ mipsel.deb


• Debian libtiff3g_3.5.5-7_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/t/tiff/libtiff3g_3.5.5-7_ powerpc.deb


• Debian libtiff3g_3.5.5-7_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/t/tiff/libtiff3g_3.5.5-7_ s390.deb


• Debian libtiff3g_3.5.5-7_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/t/tiff/libtiff3g_3.5.5-7_ sparc.deb


• LibTIFF tif_dirread.c
  http://bugzilla.remotesensing.org/attachment.cgi?id=238


• Mandriva libtiff-3.5.7-11.8.M20mdk.src.rpm
  Multi Network Firewall 2.0:
  http://www.mandriva.com/en/download


• Mandriva libtiff3-3.5.7-11.8.M20mdk.i586.rpm
  Multi Network Firewall 2.0:
  http://www.mandriva.com/en/download

LibTIFF LibTIFF 3.6 .0

• LibTIFF tif_dirread.c
  http://bugzilla.remotesensing.org/attachment.cgi?id=238

LibTIFF LibTIFF 3.6.1

• LibTIFF tif_dirread.c
  http://bugzilla.remotesensing.org/attachment.cgi?id=238


• Mandriva lib64tiff3-3.6.1-11.2.102mdk.x86_64.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva lib64tiff3-3.6.1-12.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva lib64tiff3-3.6.1-4.5.101mdk.x86_64.rpm
  Mandriva Linux 10.1:
  http://www.mandriva.com/en/download


• Mandriva lib64tiff3-devel-3.6.1-11.2.102mdk.x86_64.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva lib64tiff3-devel-3.6.1-12.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva lib64tiff3-devel-3.6.1-4.5.101mdk.x86_64.rpm
  Mandriva Linux 10.1:
  http://www.mandriva.com/en/download


• Mandriva lib64tiff3-static-devel-3.6.1-11.2.102mdk.x86_64.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva lib64tiff3-static-devel-3.6.1-12.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva lib64tiff3-static-devel-3.6.1-4.5.101mdk.x86_64.rpm
  Mandriva Linux 10.1:
  http://www.mandriva.com/en/download


• Mandriva libtiff-3.6.1-11.2.102mdk.src.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva libtiff-3.6.1-12.1.20060mdk.src.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva libtiff-3.6.1-4.5.101mdk.src.rpm
  Mandriva Linux 10.1:
  http://www.mandriva.com/en/download


• Mandriva libtiff-progs-3.6.1-11.2.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva libtiff-progs-3.6.1-11.2.102mdk.x86_64.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva libtiff-progs-3.6.1-12.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva libtiff-progs-3.6.1-12.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva libtiff-progs-3.6.1-4.5.101mdk.i586.rpm
  Mandriva Linux 10.1:
  http://www.mandriva.com/en/download


• Mandriva libtiff-progs-3.6.1-4.5.101mdk.x86_64.rpm
  Mandriva Linux 10.1:
  http://www.mandriva.com/en/download


• Mandriva libtiff3-3.6.1-11.2.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva libtiff3-3.6.1-12.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva libtiff3-3.6.1-4.5.101mdk.i586.rpm
  Mandriva Linux 10.1:
  http://www.mandriva.com/en/download


• Mandriva libtiff3-devel-3.6.1-11.2.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva libtiff3-devel-3.6.1-12.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva libtiff3-devel-3.6.1-4.5.101mdk.i586.rpm
  Mandriva Linux 10.1:
  http://www.mandriva.com/en/download


• Mandriva libtiff3-static-devel-3.6.1-11.2.102mdk.i586.rpm
  Mandriva Linux 10.2:
  http://www.mandriva.com/en/download


• Mandriva libtiff3-static-devel-3.6.1-12.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva libtiff3-static-devel-3.6.1-4.5.101mdk.i586.rpm
  Mandriva Linux 10.1:
  http://www.mandriva.com/en/download


• Ubuntu libtiff-tools_3.6.1-1.1ubuntu1.3_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/t/tiff/libtiff-tools_3 .6.1-1.1ubuntu1.3_amd64.deb


• Ubuntu libtiff-tools_3.6.1-1.1ubuntu1.3_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/t/tiff/libtiff-tools_3 .6.1-1.1ubuntu1.3_i386.deb


• Ubuntu libtiff-tools_3.6.1-1.1ubuntu1.3_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/t/tiff/libtiff-tools_3 .6.1-1.1ubuntu1.3_powerpc.deb


• Ubuntu libtiff-tools_3.6.1-5ubuntu0.1_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-tools_3.6.1 -5ubuntu0.1_amd64.deb


• Ubuntu libtiff-tools_3.6.1-5ubuntu0.1_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-tools_3.6.1 -5ubuntu0.1_i386.deb


• Ubuntu libtiff-tools_3.6.1-5ubuntu0.1_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff-tools_3.6.1 -5ubuntu0.1_powerpc.deb


• Ubuntu libtiff4-dev_3.6.1-1.1ubuntu1.3_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4-dev_3.6.1- 1.1ubuntu1.3_amd64.deb


• Ubuntu libtiff4-dev_3.6.1-1.1ubuntu1.3_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4-dev_3.6.1- 1.1ubuntu1.3_i386.deb


• Ubuntu libtiff4-dev_3.6.1-1.1ubuntu1.3_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4-dev_3.6.1- 1.1ubuntu1.3_powerpc.deb


• Ubuntu libtiff4-dev_3.6.1-5ubuntu0.1_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4-dev_3.6.1- 5ubuntu0.1_amd64.deb


• Ubuntu libtiff4-dev_3.6.1-5ubuntu0.1_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4-dev_3.6.1- 5ubuntu0.1_i386.deb


• Ubuntu libtiff4-dev_3.6.1-5ubuntu0.1_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4-dev_3.6.1- 5ubuntu0.1_powerpc.deb


• Ubuntu libtiff4_3.6.1-1.1ubuntu1.3_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4_3.6.1-1.1u buntu1.3_amd64.deb


• Ubuntu libtiff4_3.6.1-1.1ubuntu1.3_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4_3.6.1-1.1u buntu1.3_i386.deb


• Ubuntu libtiff4_3.6.1-1.1ubuntu1.3_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4_3.6.1-1.1u buntu1.3_powerpc.deb


• Ubuntu libtiff4_3.6.1-5ubuntu0.1_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4_3.6.1-5ubu ntu0.1_amd64.deb


• Ubuntu libtiff4_3.6.1-5ubuntu0.1_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4_3.6.1-5ubu ntu0.1_i386.deb


• Ubuntu libtiff4_3.6.1-5ubuntu0.1_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/t/tiff/libtiff4_3.6.1-5ubu ntu0.1_powerpc.deb

LibTIFF LibTIFF 3.7

• LibTIFF tif_dirread.c
  http://bugzilla.remotesensing.org/attachment.cgi?id=238

LibTIFF LibTIFF 3.7.1

• LibTIFF tif_dirread.c
  http://bugzilla.remotesensing.org/attachment.cgi?id=238

SCO Unixware 7.1.4

• SCO tiff.pkg
  ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.34/tiff.pkg