TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to pass numeric range checks and possibly execute code, and trigger assert errors, via large offset values in a TIFF directory that lead to an integer overflow and other unspecified vectors involving unchecked arithmetic operations.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libtiff | Libtiff | * | 3.8.1 (including) |
| Red Hat Enterprise Linux 3 | RedHat | libtiff-0:3.5.7-25.el3.4 | * |
| Red Hat Enterprise Linux 3 | RedHat | kdegraphics-7:3.1.3-3.10 | * |
| Red Hat Enterprise Linux 4 | RedHat | libtiff-0:3.6.1-12 | * |
| Tiff | Ubuntu | dapper | * |
| Tiff | Ubuntu | devel | * |
| Tiff | Ubuntu | edgy | * |
| Tiff | Ubuntu | feisty | * |