National Cyber Awareness System

Vulnerability Summary for CVE-2011-0192

Overview

Buffer overflow in Fax4Decode in LibTIFF 3.9.4 and possibly other versions, as used in ImageIO in Apple iTunes before 10.2 on Windows and other products, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF Internet Fax image file that has been compressed using CCITT Group 4 encoding, related to the EXPAND2D macro in libtiff/tif_fax3.h. NOTE: some of these details are obtained from third party information.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: APPLE

Name: APPLE-SA-2011-03-02-1

Type: Advisory; Patch Information

Hyperlink:http://lists.apple.com/archives/security-announce/2011/Mar/msg00000.html

External Source: CONFIRM

Name: https://bugzilla.redhat.com/show_bug.cgi?id=678635

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=678635

External Source: VUPEN

Name: ADV-2011-0960

Hyperlink:http://www.vupen.com/english/advisories/2011/0960

External Source: VUPEN

Name: ADV-2011-0930

Hyperlink:http://www.vupen.com/english/advisories/2011/0930

External Source: VUPEN

Name: ADV-2011-0905

Hyperlink:http://www.vupen.com/english/advisories/2011/0905

External Source: VUPEN

Name: ADV-2011-0845

Hyperlink:http://www.vupen.com/english/advisories/2011/0845

External Source: VUPEN

Name: ADV-2011-0621

Hyperlink:http://www.vupen.com/english/advisories/2011/0621

External Source: VUPEN

Name: ADV-2011-0599

Hyperlink:http://www.vupen.com/english/advisories/2011/0599

External Source: VUPEN

Name: ADV-2011-0551

Hyperlink:http://www.vupen.com/english/advisories/2011/0551

External Source: SECTRACK

Name: 1025153

Hyperlink:http://www.securitytracker.com/id?1025153

External Source: BID

Name: 46658

Hyperlink:http://www.securityfocus.com/bid/46658

External Source: REDHAT

Name: RHSA-2011:0318

Hyperlink:http://www.redhat.com/support/errata/RHSA-2011-0318.html

External Source: MANDRIVA

Name: MDVSA-2011:043

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2011:043

External Source: DEBIAN

Name: DSA-2210

Hyperlink:http://www.debian.org/security/2011/dsa-2210

External Source: CONFIRM

Name: http://support.apple.com/kb/HT5001

Hyperlink:http://support.apple.com/kb/HT5001

External Source: CONFIRM

Name: http://support.apple.com/kb/HT4999

Hyperlink:http://support.apple.com/kb/HT4999

External Source: CONFIRM

Name: http://support.apple.com/kb/HT4581

Hyperlink:http://support.apple.com/kb/HT4581

External Source: CONFIRM

Name: http://support.apple.com/kb/HT4566

Hyperlink:http://support.apple.com/kb/HT4566

External Source: CONFIRM

Name: http://support.apple.com/kb/HT4565

Hyperlink:http://support.apple.com/kb/HT4565

External Source: CONFIRM

Name: http://support.apple.com/kb/HT4564

Hyperlink:http://support.apple.com/kb/HT4564

External Source: CONFIRM

Name: http://support.apple.com/kb/HT4554

Type: Advisory

Hyperlink:http://support.apple.com/kb/HT4554

External Source: SLACKWARE

Name: SSA:2011-098-01

Hyperlink:http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.587820

External Source: GENTOO

Name: GLSA-201209-02

Hyperlink:http://security.gentoo.org/glsa/glsa-201209-02.xml

External Source: SECUNIA

Name: 50726

Hyperlink:http://secunia.com/advisories/50726

External Source: SECUNIA

Name: 44135

Hyperlink:http://secunia.com/advisories/44135

External Source: SECUNIA

Name: 44117

Hyperlink:http://secunia.com/advisories/44117

External Source: SECUNIA

Name: 43934

Hyperlink:http://secunia.com/advisories/43934

External Source: SECUNIA

Name: 43664

Hyperlink:http://secunia.com/advisories/43664

External Source: SECUNIA

Name: 43593

Hyperlink:http://secunia.com/advisories/43593

External Source: SECUNIA

Name: 43585

Hyperlink:http://secunia.com/advisories/43585

External Source: FEDORA

Name: FEDORA-2011-2498

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055683.html

External Source: FEDORA

Name: FEDORA-2011-2540

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055240.html

External Source: FEDORA

Name: FEDORA-2011-3827

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057840.html

External Source: FEDORA

Name: FEDORA-2011-3836

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057763.html

External Source: APPLE

Name: APPLE-SA-2011-03-21-1

Hyperlink:http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html

External Source: APPLE

Name: APPLE-SA-2011-10-12-2

Hyperlink:http://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.html

External Source: APPLE

Name: APPLE-SA-2011-10-12-1

Hyperlink:http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html

External Source: APPLE

Name: APPLE-SA-2011-03-09-3

Hyperlink:http://lists.apple.com/archives/security-announce/2011//Mar/msg00005.html

External Source: APPLE

Name: APPLE-SA-2011-03-09-2

Hyperlink:http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html

External Source: APPLE

Name: APPLE-SA-2011-03-09-1

Hyperlink:http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html

External Source: CONFIRM

Name: http://blackberry.com/btsc/KB27244

Hyperlink:http://blackberry.com/btsc/KB27244