projects / scm / bb / tizen-distro.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ca1a69b) | patch
libtiff: fix CVE-2013-1960
authorMing Liu <ming.liu@windriver.com>
Thu, 5 Dec 2013 23:52:14 +0000 (17:52 -0600)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Tue, 10 Dec 2013 17:42:44 +0000 (17:42 +0000)
commit8b7e602459430fb01026c47dd56c574f2e27018d
tree0c2e07bfb49d37e07e2c9c03a829888a1b719ddbtree | snapshot
parentca1a69be16a2038881d19424e35366437930313bcommit | diff
libtiff: fix CVE-2013-1960

Heap-based buffer overflow in the tp_process_jpeg_strip function in tiff2pdf
in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of
service (crash) and possibly execute arbitrary code via a crafted TIFF image
file.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-1960

(From OE-Core rev: 9db7a897d216a8293152c1a3b96c72b699d469c7)

Signed-off-by: Ming Liu <ming.liu@windriver.com>
Signed-off-by: Jeff Polk <jeff.polk@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-multimedia/libtiff/files/libtiff-CVE-2013-1960.patch [new file with mode: 0644] blob
meta/recipes-multimedia/libtiff/tiff_4.0.3.bb diff | blob | history
Domain: SCM / BB;