FreeBSD : tiff -- directory entry count integer overflow vulnerability (fc7e6a42-6012-11d9-a9e7-0001020eed82)

critical Nessus Plugin ID 19184

Synopsis

The remote FreeBSD host is missing one or more security-related updates.

Description

In an iDEFENSE Security Advisory infamous41md reports :

Remote exploitation of a heap-based buffer overflow vulnerability within the LibTIFF package could allow attackers to execute arbitrary code.

The vulnerability specifically exists due to insufficient validation of user-supplied data when calculating the size of a directory entry.
A TIFF file includes a number of directory entry header fields that describe the data in the file. Included in these entries is an entry count and offset value that are calculated to determine the size and location of the data for that entry.

Solution

Update the affected packages.

Plugin Details

Severity: Critical

ID: 19184

File Name: freebsd_pkg_fc7e6a42601211d9a9e70001020eed82.nasl

Version: 1.23

Type: local

Family: FreeBSD Local Security Checks

Published: 7/13/2005

Updated: 1/6/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:fractorama, p-cpe:/a:freebsd:freebsd:gdal, p-cpe:/a:freebsd:freebsd:iv, p-cpe:/a:freebsd:freebsd:ivtools, p-cpe:/a:freebsd:freebsd:ja-iv, p-cpe:/a:freebsd:freebsd:ja-libimg, p-cpe:/a:freebsd:freebsd:linux-tiff, p-cpe:/a:freebsd:freebsd:paraview, p-cpe:/a:freebsd:freebsd:pdflib, p-cpe:/a:freebsd:freebsd:pdflib-perl, p-cpe:/a:freebsd:freebsd:tiff, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Exploit Ease: No known exploits are available

Patch Publication Date: 1/6/2005

Vulnerability Publication Date: 12/17/2004

Reference Information

CVE: CVE-2004-1308

BID: 12075

CERT: 125598

Detections

Analytics