Oval Definition:
oval:org.mitre.oval:def:100116
Revision Date
:
2005-11-16
Version
:
17
Title
:
libtiff Malloc Error Denial of Service
Description
:
Multiple integer overflows in libtiff 3.6.1 and earlier allow remote attackers to cause a denial of service (crash or memory corruption) via TIFF images that lead to incorrect malloc calls.
Family
:
unix
Class
:
vulnerability
Status
:
ACCEPTED
Reference(s)
:
CVE-2004-0886
Platform(s)
:
Sun Solaris 10
Sun Solaris 7
Sun Solaris 8
Sun Solaris 9
Product(s)
:
libtiff
Definition Synopsis
Solaris 7 (SPARC) meets Sun Alert ID 101677 criteria.
Solaris 7 Installed
AND
Installed architecture is sparc
AND
NOT
Patch 118953-02 or later installed
OR
Solaris 7 (x86) meets Sun Alert ID 101677 criteria.
Solaris 7 Installed
AND
ix86 architecture
AND
NOT
Patch 118954-02 or later installed
OR
Solaris 8 (SPARC) meets Sun Alert ID 101677 criteria.
Solaris 8 Installed
AND
Installed architecture is sparc
AND
NOT
Patch 109931-10 or later installed
OR
Solaris 8 (x86) meets Sun Alert ID 101677 criteria.
Solaris 8 Installed
AND
ix86 architecture
AND
NOT
Patch 109932-10 or later installed
OR
Solaris 9 (SPARC) meets Sun Alert ID 101677 criteria.
Solaris 9 Installed
AND
Installed architecture is sparc
AND
Solaris 9 (SPARC) supporting criteria for Sun Alert ID 101677.
Solaris 9 (SPARC) supporting CDE criteria for Sun Alert ID 101677.
CDE Desktop Window Manager (SUNWdtwm) installed
AND
NOT
Patch 114219-11 or later installed
OR
Pkg SUNWTiff is installed
OR
Pkg SUNWTiffx is installed
OR
Solaris 9 (x86) meets Sun Alert ID 101677 criteria.
Solaris 9 Installed
AND
ix86 architecture
AND
Solaris 9 (x86) supporting criteria for Sun Alert ID 101677.
Solaris 9 (x86) supporting CDE criteria for Sun Alert ID 101677.
CDE Desktop Window Manager (SUNWdtwm) installed
AND
NOT
Patch 114220-11 or later installed
OR
Pkg SUNWTiff is installed
OR
Pkg SUNWTiffx is installed
OR
Solaris 10 (SPARC) meets Sun Alert ID 101677 criteria.
Solaris 10 Installed
AND
Installed architecture is sparc
AND
Pkg SUNWTiff is installed
AND
NOT
Patch 119900-01 or later installed
OR
Solaris 10 (x86) meets Sun Alert ID 101677 criteria.
Solaris 10 Installed
AND
ix86 architecture
AND
Pkg SUNWTiff is installed
AND
NOT
Patch 119901-01 or later installed
BACK