CVE:CVE-2012-4564
CNNVD:CNNVD-201211-074
LibTIFF是一个读写TIFF（标签图像文件格式）文件的库。该库包含一些处理TIFF文件的命令行工具。
libtiff存在安全漏洞。远程攻击者利用该漏洞通过特制的PPM图像触发整数溢出、零内存分配以及基于堆的缓冲区溢出，导致拒绝服务（崩溃）及有可能执行任意代码。
solution:Upgrade libtiff libtiff to a higher version than 4.0.3,and avoid the version (,4.0.3]; Upgrade debian debian_linux to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade canonical ubuntu_linux to a higher version than 8.04,10.04,11.10,12.04,12.10,and avoid the version 8.04,10.04,11.10,12.04,12.10; Upgrade redhat enterprise_linux_desktop to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade redhat enterprise_linux_eus to a higher version than 6.3,and avoid the version 6.3; Upgrade redhat enterprise_linux_server to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade redhat enterprise_linux_workstation to a higher version than 5.0,6.0,and avoid the version 5.0,6.0; Upgrade opensuse opensuse to a higher version than 11.4,and avoid the version 11.4