diff options
| author | dinoex <dinoex@FreeBSD.org> | 2010-06-16 17:31:34 +0800 |
|---|---|---|
| committer | dinoex <dinoex@FreeBSD.org> | 2010-06-16 17:31:34 +0800 |
| commit | 845a546e78c959898cd24cfc9591daae06ac5ee5 (patch) | |
| tree | 3ba2b1df5b2553281d04e60e2a476bf0e1bf7961 /security/vuxml | |
| parent | 498af0662c17f1e3dfeac9eb8df4c9777b5e5bbd (diff) | |
| download | freebsd-ports-gnome-845a546e78c959898cd24cfc9591daae06ac5ee5.tar.gz freebsd-ports-gnome-845a546e78c959898cd24cfc9591daae06ac5ee5.tar.zst freebsd-ports-gnome-845a546e78c959898cd24cfc9591daae06ac5ee5.zip | |
add CVE-2009-2347 tiff
Diffstat (limited to 'security/vuxml')
| -rw-r--r-- | security/vuxml/vuln.xml | 36 |
1 files changed, 36 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 67c47069cf6b..9d9e9af2831e 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,42 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="8816bf3a-7929-11df-bcce-0018f3e2eb82"> + <topic>tiff -- Multiple integer overflows</topic> + <affects> + <package> + <name>tiff</name> + <range><lt>3.9.4</lt></range> + </package> + <package> + <name>linux-tiff</name> + <range><lt>3.9.4</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Tielei Wang:</p> + <blockquote cite="http://www.ocert.org/advisories/ocert-2009-012.html"> + <p>Multiple integer overflows in inter-color spaces conversion + tools in libtiff 3.8 through 3.8.2, 3.9, and 4.0 allow + context-dependent attackers to execute arbitrary code via a + TIFF image with large (1) width and (2) height values, which + triggers a heap-based buffer overflow in the (a) cvt_whole_image + function in tiff2rgba and (b) tiffcvt function in rgb2ycbcr.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2009-2347</cvename> + <url>http://www.remotesensing.org/libtiff/v3.9.4.html</url> + <url>http://www.ocert.org/advisories/ocert-2009-012.html</url> + </references> + <dates> + <discovery>2009-05-22</discovery> + <entry>2010-06-16</entry> + </dates> + </vuln> + <vuln vid="144e524a-77eb-11df-ae06-001b2134ef46"> <topic>linux-flashplugin -- multiple vulnerabilities</topic> <affects> |