Signature Detail
Short Name |
HTTP:STC:IMG:JPEGDECODERAW-FUNC |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
LibTIFF JPEGDecodeRaw Function Remote Code Execution |
Release Date |
2011/08/19 |
Update Number |
1977 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: LibTIFF JPEGDecodeRaw Function Remote Code Execution
This signature detects attempts to exploit a known vulnerability against LibTIFF. A successful attack can lead to arbitrary code execution.
Extended Description
LibTIFF is prone to a remote memory-corruption vulnerability. An attacker could exploit this issue to execute arbitrary code in the context of the application using the library. Failed exploit attempts may result in denial-of-service conditions.
Affected Products
- Mandriva Linux Mandrake 2010.0
- Mandriva Linux Mandrake 2010.0 X86 64
- Mandriva Linux Mandrake 2010.1
- Mandriva Linux Mandrake 2010.1 X86 64
- Research In Motion Blackberry Enterprise Server Express for Domino 5.0.2
- Research In Motion Blackberry Enterprise Server Express for Domino 5.0.2 MR1
- Research In Motion Blackberry Enterprise Server Express for Domino 5.0.3
- Research In Motion Blackberry Enterprise Server Express for Exchange 5.0.1
- Research In Motion Blackberry Enterprise Server Express for Exchange 5.0.2
- Research In Motion Blackberry Enterprise Server Express for Exchange 5.0.2 MR1
- Research In Motion Blackberry Enterprise Server Express for Exchange 5.0.3
- Research In Motion Blackberry Enterprise Server for Domino 5.0.1
- Research In Motion Blackberry Enterprise Server for Domino 5.0.2
- Research In Motion Blackberry Enterprise Server for Domino 5.0.2 MR1
- Research In Motion Blackberry Enterprise Server for Domino 5.0.3
- Research In Motion Blackberry Enterprise Server for Domino 5.0.3 MR3
- Research In Motion Blackberry Enterprise Server for Exchange 5.0.1
- Research In Motion Blackberry Enterprise Server for Exchange 5.0.2
- Research In Motion Blackberry Enterprise Server for Exchange 5.0.2 MR1
- Research In Motion Blackberry Enterprise Server for Exchange 5.0.3
- Research In Motion Blackberry Enterprise Server for Exchange 5.0.3 MR2
- Research In Motion Blackberry Enterprise Server for Novell Groupwise 4.1.7
- Research In Motion Blackberry Enterprise Server for Novell Groupwise 5.0.1
- Research In Motion Blackberry Enterprise Server for Novell Groupwise 5.0.1 MR3
- SuSE openSUSE 11.3
- Ubuntu Ubuntu Linux 10.04 Amd64
- Ubuntu Ubuntu Linux 10.04 ARM
- Ubuntu Ubuntu Linux 10.04 I386
- Ubuntu Ubuntu Linux 10.04 Powerpc
- Ubuntu Ubuntu Linux 10.04 Sparc
- Ubuntu Ubuntu Linux 10.10 amd64
- Ubuntu Ubuntu Linux 10.10 ARM
- Ubuntu Ubuntu Linux 10.10 i386
- Ubuntu Ubuntu Linux 10.10 powerpc
- Ubuntu Ubuntu Linux 6.06 LTS Amd64
- Ubuntu Ubuntu Linux 6.06 LTS I386
- Ubuntu Ubuntu Linux 6.06 LTS Powerpc
- Ubuntu Ubuntu Linux 6.06 LTS Sparc
- Ubuntu Ubuntu Linux 8.04 LTS Amd64
- Ubuntu Ubuntu Linux 8.04 LTS I386
- Ubuntu Ubuntu Linux 8.04 LTS Lpia
- Ubuntu Ubuntu Linux 8.04 LTS Powerpc
- Ubuntu Ubuntu Linux 8.04 LTS Sparc
- Ubuntu Ubuntu Linux 9.10 Amd64
- Ubuntu Ubuntu Linux 9.10 ARM
- Ubuntu Ubuntu Linux 9.10 I386
- Ubuntu Ubuntu Linux 9.10 Lpia
- Ubuntu Ubuntu Linux 9.10 Powerpc
- Ubuntu Ubuntu Linux 9.10 Sparc
References
- BugTraq: 43366
- CVE: CVE-2010-3087