Thread

2011.03.21 16:09 "[Tiff] Thunder Decoder Vulnerability", by Frank Warmerdam

2011.04.20 19:18 "Re: [Tiff] bmp2tiff test", by Hunter1972

2011.04.20 18:46 "Re: [Tiff] bmp2tiff test", by Hunter1972

2011.04.20 15:08 "[Tiff] bmp2tiff test", by Hunter1972

2011.04.20 17:37 "Re: [Tiff] bmp2tiff test", by Frank Warmerdam

2011.04.20 18:50 "Re: [Tiff] bmp2tiff test", by Hunter1972

2011.04.20 19:12 "Re: [Tiff] bmp2tiff test", by Frank Warmerdam

2011.04.20 17:43 "Re: [Tiff] bmp2tiff test", by Bob Friesenhahn

2011.04.20 20:13 "Re: [Tiff] bmp2tiff test", by Bob Friesenhahn

2011.05.20 12:59 "Re: [Tiff] Failed to allocate memory", by Thomas Ellett

2011.05.20 12:22 "Re: [Tiff] Failed to allocate memory", by Thomas Ellett

2011.05.20 09:14 "Re: [Tiff] Failed to allocate memory", by John

2011.05.20 12:46 "Re: [Tiff] Failed to allocate memory", by Frank Warmerdam

2011.05.20 20:37 "Re: [Tiff] Failed to allocate memory", by John

2011.05.20 13:07 "Re: [Tiff] Failed to allocate memory", by Frank Warmerdam

2011.03.21 16:09 "[Tiff] Thunder Decoder Vulnerability", by Frank Warmerdam

Folks,

Thanks to a report from the Zero Day Initiative, there is a fix for a buffer overflow problem in libtiff's thunder decoder. Details are available at:

http://bugzilla.maptools.org/show_bug.cgi?id=2300

The libtiff development team would like to thank Marin Barbella and TippingPoint's Zero Day Initiative for reporting this vulnerability (ZDI-CAN-1004, CVE-2011-1167).

Best regards,
--

---------------------------------------+--------------------------------------
I set the clouds in motion - turn up | Frank Warmerdam, warmerdam@pobox.com
light and sound - activate the windows | http://pobox.com/~warmerdam
and watch the world go round - Rush | Geospatial Programmer for Rent