Martin Pitt

Name of the Vulnerable Software and Affected Versions: libtiff versions 3.8.2 and earlier libtiff versions 3.6.1 and earlier Description: The issue is related to a buffer overflow in the t2p write pdf string function in tiff2pdf, which can be triggered by a TIFF file with a DocumentName tag containing UTF-8 characters. This can cause a denial of service (crash) and possibly allow the execution of arbitrary code. The vulnerability can be exploited remotely, potentially leading to a violation of confidentiality, integrity, and availability of protected information. Recommendations: For libtiff versions 3.8.2 and earlier, update to a version later than 3.8.2 to resolve the issue. For libtiff versions 3.6.1 and earlier, update to a version later than 3.6.1 to resolve the issue. As a temporary workaround, consider restricting access to TIFF files with UTF-8 characters in the DocumentName tag to minimize the risk of exploitation.

The issue allows remote attackers to cause a denial of service, resulting in a persistent client crash. This can be achieved by sending an attached text file with "Content-Disposition: inline" in the header and a very long line in the body. The client will repeatedly crash until the e-mail message is manually removed. The cause might be related to a buffer overflow, as demonstrated using an XML attachment.

The issue is related to multiple stack-based buffer overflows in the RTF import feature. This occurs when handling long identifiers in RTF files, which are not properly handled in certain functions. The affected functions include `ParseLevelText`, `getCharsInsideBrace`, `HandleLists`, and `HandleAbiLists` in the file ie imp RTF.cpp. This allows user-assisted attackers to execute arbitrary code.

The issue arises from improper restriction of access to other directories when the open basedir directive includes a trailing slash. This allows PHP scripts in one directory to access files in other directories whose names are substrings of the original directory.

The issue involves multiple vulnerabilities in the Heimdal package and its related libraries in the Debian GNU/Linux operating system. These vulnerabilities can lead to a disruption of protected information and can be exploited remotely. The exploitation may cause a denial of service, such as a server crash, via unknown vectors that trigger a null dereference.

The issue involves multiple vulnerabilities in various packages of the openSUSE operating system, which can lead to a breach of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. Additionally, there are vulnerabilities in LibVNCServer and x11vnc, which can also be exploited remotely.