Test ID:	1.3.6.1.4.1.25623.1.0.702965
Category:	Debian Local Security Checks
Title:	Debian Security Advisory DSA 2965-1 (tiff - security update)
Summary:	Murray McAllister discovered a heap-based buffer overflow in the gif2tiff;command line tool. Executing gif2tiff on a malicious tiff image could;result in arbitrary code execution.
Description:	Summary: Murray McAllister discovered a heap-based buffer overflow in the gif2tiff command line tool. Executing gif2tiff on a malicious tiff image could result in arbitrary code execution. Affected Software/OS: tiff on Debian Linux Solution: For the stable distribution (wheezy), this problem has been fixed in version 4.0.2-6+deb7u3. For the testing distribution (jessie), this problem will be fixed soon. For the unstable distribution (sid), this problem has been fixed in version 4.0.3-9. We recommend that you upgrade your tiff packages. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-4243 BugTraq ID: 62082 http://www.securityfocus.com/bid/62082 Debian Security Information: DSA-2744 (Google Search) http://www.debian.org/security/2013/dsa-2744 https://security.gentoo.org/glsa/201701-16 RedHat Security Advisories: RHSA-2014:0223 http://rhn.redhat.com/errata/RHSA-2014-0223.html http://secunia.com/advisories/54543 http://secunia.com/advisories/54628
Copyright	Copyright (c) 2014 Greenbone Networks GmbH http://greenbone.net

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.