Test ID:	1.3.6.1.4.1.25623.1.0.54454
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-156-1 (tiff)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to tiff announced via advisory USN-156-1. A security issue affects the following Ubuntu releases: Ubuntu 4.10 (Warty Warthog) Ubuntu 5.04 (Hoary Hedgehog) The following packages are affected: libtiff4 Wouter Hanegraaff discovered that the TIFF library did not sufficiently validate the YCbCr subsampling value in TIFF image headers. Decoding a malicious image with a zero value resulted in an arithmetic exception, which caused the program that uses the TIFF library to crash. This leads to a Denial of Service in server applications that use libtiff (like the CUPS printing system) and can cause data loss in, for example, the Evolution email client. Solution: The problem can be corrected by upgrading the affected package to version 3.6.1-1.1ubuntu1.4 (for Ubuntu 4.10), or 3.6.1-5ubuntu0.2 (for Ubuntu 5.04). After a standard system upgrade you need to restart your CUPS server with sudo /etc/init.d/cupsys restart to effect the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-156-1 Risk factor : High
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.