Vulnerability Note VU#555304

LibTIFF vulnerable to denial-of-service condition

Original Release date: 01 Dec 2004 | Last revised: 17 May 2005

Overview

An Integer overflow in the LibTIFF library may allow a remote attacker to cause a divide-by-zero error that results in a denial-of-service condition.

Description

LibTIFF is a library used to encode and decode images in Tag Image File Format (TIFF) format. An integer overflow in the tif_dirread.c file may allow an attacker to cause a divide-by-zero error. If a remote attacker can persuade a user to access a specially crafted TIFF image with the row bytes field set to zero, that attacker may cause the divide-by-zero error and crash the process that linked to the LibTIFF library.

Any program that uses the LibTIFF library may be affected by this issue. Users are encouraged to contact their vendors to determine if they are vulnerable.

Impact

A remote attacker may be able to cause a divide-by-zero error and crash the process linked to the LibTIFF library.

Solution

Apply Patch


Patch or upgrade as specified by your vendor. Users who suspect they are vulnerable are encouraged to check with their vendor to determine the appropriate action to take.

Systems Affected (Learn More)

VendorStatusDate NotifiedDate Updated
NEC CorporationNot Affected01 Nov 200417 Mar 2005
Apple Computer Inc.Unknown01 Nov 200417 May 2005
BSDIUnknown-01 Nov 2004
ConectivaUnknown-01 Nov 2004
Cray Inc.Unknown-01 Nov 2004
DebianUnknown01 Nov 200402 Nov 2004
EMC CorporationUnknown-01 Nov 2004
EngardeUnknown-01 Nov 2004
F5 NetworksUnknown-01 Nov 2004
FreeBSDUnknown-01 Nov 2004
FujitsuUnknown-01 Nov 2004
Hewlett-Packard CompanyUnknown-01 Nov 2004
HitachiUnknown-01 Nov 2004
IBMUnknown-01 Nov 2004
IBM-zSeriesUnknown-01 Nov 2004
If you are a vendor and your product is affected, let us know.View More »

CVSS Metrics (Learn More)

Group Score Vector
Base N/A N/A
Temporal N/A N/A
Environmental N/A N/A

References

Credit

This vulnerability was reported in Secunia Security Advisory SA12818.


Secunia credits Chris Evans and Dmitry V. Levin for providing information regarding this vulnerability.

This document was written by Jeff Gennari.

Other Information

  • CVE IDs: CAN-2004-0804
  • Date Public: 25 Aug 2004
  • Date First Published: 01 Dec 2004
  • Date Last Updated: 17 May 2005
  • Severity Metric: 0.69
  • Document Revision: 79

Feedback

If you have feedback, comments, or additional information about this vulnerability, please send us email.