CVE:CVE-2014-8129
CNNVD:CNNVD-201501-700
LibTIFF是一个读写TIFF（标签图像文件格式）文件的库。该库包含一些处理TIFF文件的命令行工具。
LibTiff 4.0.3版本中存在缓冲区错误漏洞。远程攻击者可借助特制的TIFF图像利用该漏洞造成拒绝服务服务（越界写入）。
solution:Upgrade libtiff libtiff to a higher version than 4.0.3,and avoid the version 4.0.3; Upgrade debian debian_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.2,7.3,7.4,and avoid the version 7.2,7.3,7.4; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.2,7.3,7.4,and avoid the version 7.2,7.3,7.4; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.2,7.3,and avoid the version 7.2,7.3; Upgrade apple mac_os_x to a higher version than 10.8.5,10.9.5,10.10.0,10.10.1,10.10.2,10.10.3,and avoid the version 10.8.5,10.9.5,10.10.0,10.10.1,10.10.2,10.10.3; Upgrade apple iphone_os to a higher version than -