Oval Definition:oval:org.mitre.oval:def:100114
Revision Date:2005-11-16Version:17
Title:libtiff RLE Decoder Buffer Overflow Vulnerabilities
Description:Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.
Family:unixClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2004-0803
Platform(s):Sun Solaris 10
Sun Solaris 7
Sun Solaris 8
Sun Solaris 9
Product(s):libtiff
Definition Synopsis
  • Solaris 7 (SPARC) meets Sun Alert ID 101677 criteria.
  • Solaris 7 Installed
  • AND Installed architecture is sparc
  • AND NOT Patch 118953-02 or later installed
  • OR Solaris 7 (x86) meets Sun Alert ID 101677 criteria.
  • Solaris 7 Installed
  • AND ix86 architecture
  • AND NOT Patch 118954-02 or later installed
  • OR Solaris 8 (SPARC) meets Sun Alert ID 101677 criteria.
  • Solaris 8 Installed
  • AND Installed architecture is sparc
  • AND NOT Patch 109931-10 or later installed
  • OR Solaris 8 (x86) meets Sun Alert ID 101677 criteria.
  • Solaris 8 Installed
  • AND ix86 architecture
  • AND NOT Patch 109932-10 or later installed
  • OR Solaris 9 (SPARC) meets Sun Alert ID 101677 criteria.
  • Solaris 9 Installed
  • AND Installed architecture is sparc
  • AND Solaris 9 (SPARC) supporting criteria for Sun Alert ID 101677.
  • Solaris 9 (SPARC) supporting CDE criteria for Sun Alert ID 101677.
  • CDE Desktop Window Manager (SUNWdtwm) installed
  • AND NOT Patch 114219-11 or later installed
  • OR Pkg SUNWTiff is installed
  • OR Pkg SUNWTiffx is installed
  • OR Solaris 9 (x86) meets Sun Alert ID 101677 criteria.
  • Solaris 9 Installed
  • AND ix86 architecture
  • AND Solaris 9 (x86) supporting criteria for Sun Alert ID 101677.
  • Solaris 9 (x86) supporting CDE criteria for Sun Alert ID 101677.
  • CDE Desktop Window Manager (SUNWdtwm) installed
  • AND NOT Patch 114220-11 or later installed
  • OR Pkg SUNWTiff is installed
  • OR Pkg SUNWTiffx is installed
  • OR Solaris 10 (SPARC) meets Sun Alert ID 101677 criteria.
  • Solaris 10 Installed
  • AND Installed architecture is sparc
  • AND Pkg SUNWTiff is installed
  • AND NOT Patch 119900-01 or later installed
  • OR Solaris 10 (x86) meets Sun Alert ID 101677 criteria.
  • Solaris 10 Installed
  • AND ix86 architecture
  • AND Pkg SUNWTiff is installed
  • AND NOT Patch 119901-01 or later installed
    • BACK