Test ID:	1.3.6.1.4.1.25623.1.0.56832
Category:	Debian Local Security Checks
Title:	Debian Security Advisory DSA 1078-1 (tiff)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to tiff announced via advisory DSA 1078-1. Andrey Kiselev discovered a problem in the TIFF library that may allow an attacker with a specially crafted TIFF image with Yr/Yg/Yb values that exceed the YCR/YCG/YCB values to crash the library and hence the surrounding application. The old stable distribution (woody) is not affected by this problem. For the stable distribution (sarge) this problem has been fixed in version 3.7.2-4. The unstable distribution (sid) is not affected by this problem. We recommend that you upgrade your tiff packages and restart the Solution: https://secure1.securityspace.com/smysecure/catid.html?in=DSA%201078-1 CVSS Score: 2.1 CVSS Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	BugTraq ID: 17809 Common Vulnerability Exposure (CVE) ID: CVE-2006-2120 http://www.securityfocus.com/bid/17809 Debian Security Information: DSA-1078 (Google Search) http://www.debian.org/security/2006/dsa-1078 http://www.mandriva.com/security/advisories?name=MDKSA-2006:082 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9572 http://www.redhat.com/support/errata/RHSA-2006-0425.html http://secunia.com/advisories/19936 http://secunia.com/advisories/19949 http://secunia.com/advisories/19964 http://secunia.com/advisories/20023 http://secunia.com/advisories/20210 http://secunia.com/advisories/20330 http://secunia.com/advisories/20667 SGI Security Advisory: 20060501-01-U ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc http://www.trustix.org/errata/2006/0024 https://usn.ubuntu.com/277-1/
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.