Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag.

Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag. Although some of the previous updates appear to already catch this issue, this update adds some additional checks.

The updated packages have been patched to correct this issue.

Tavis Ormandy discovered a buffer overflow in the TIFF library. A malicious image with an invalid 'bits per sample' number could be constructed which, when decoded, would have resulted in execution of arbitrary code with the privileges of the process using the library.

Since this library is used in many applications like 'ghostscript' and the 'CUPS' printing system, this vulnerability may lead to remotely induced privilege escalation.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A Gentoo Linux Security Advisory reports :

Tavis Ormandy of the Gentoo Linux Security Audit Team discovered a stack based buffer overflow in the libTIFF library when reading a TIFF image with a malformed BitsPerSample tag.

Successful exploitation would require the victim to open a specially crafted TIFF image, resulting in the execution of arbitrary code.

Frank Warmerdam discovered a stack-based buffer overflow in libtiff, the Tag Image File Format library for processing TIFF graphics files that can lead to the execution of arbitrary code via malformed TIFF files.

The remote host is affected by the vulnerability described in GLSA-200505-07 (libTIFF: Buffer overflow)

    Tavis Ormandy of the Gentoo Linux Security Audit Team discovered a     stack based buffer overflow in the libTIFF library when reading a TIFF     image with a malformed BitsPerSample tag.
  Impact :

    Successful exploitation would require the victim to open a specially     crafted TIFF image, resulting in the execution of arbitrary code.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
20941	Mandrake Linux Security Advisory : libtiff (MDKSA-2006:042)	Nessus	Mandriva Local Security Checks	high
20521	Ubuntu 4.10 / 5.04 : tiff vulnerability (USN-130-1)	Nessus	Ubuntu Local Security Checks	high
19347	FreeBSD : tiff -- buffer overflow vulnerability (68222076-010b-11da-bc08-0001020eed82)	Nessus	FreeBSD Local Security Checks	high
19189	Debian DSA-755-1 : tiff - buffer overflow	Nessus	Debian Local Security Checks	high
18233	GLSA-200505-07 : libTIFF: Buffer overflow	Nessus	Gentoo Local Security Checks	high

Detections

Analytics

CVE-2005-1544

high

Tenable Plugins

high

high

high

high

high