The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2205-1 advisory.

    Pedro Ribeiro discovered that LibTIFF incorrectly handled certain malformed images when using the gif2tiff     tool. If a user or automated system were tricked into opening a specially crafted GIF image, a remote     attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code     with user privileges. This issue only affected Ubuntu 10.04 LTS, Ubunu 12.04 LTS, Ubuntu 12.10 and Ubuntu     13.10. (CVE-2013-4231)

    Pedro Ribeiro discovered that LibTIFF incorrectly handled certain malformed images when using the tiff2pdf     tool. If a user or automated system were tricked into opening a specially crafted TIFF image, a remote     attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code     with user privileges. This issue only affected Ubuntu 10.04 LTS, Ubunu 12.04 LTS, Ubuntu 12.10 and Ubuntu     13.10. (CVE-2013-4232)

    Murray McAllister discovered that LibTIFF incorrectly handled certain malformed images when using the     gif2tiff tool. If a user or automated system were tricked into opening a specially crafted GIF image, a     remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary     code with user privileges. (CVE-2013-4243)

    Huzaifa Sidhpurwala discovered that LibTIFF incorrectly handled certain malformed images when using the     gif2tiff tool. If a user or automated system were tricked into opening a specially crafted GIF image, a     remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary     code with user privileges. This issue only affected Ubuntu 10.04 LTS, Ubunu 12.04 LTS, Ubuntu 12.10 and     Ubuntu 13.10. (CVE-2013-4244)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 14.04 LTS : LibTIFF vulnerabilities (USN-2205-1)

critical Nessus Plugin ID 73902

Version 1.11