Lucene search
GoogleOSV:DSA-1835-1HistoryJul 15, 2009 - 12:00 a.m.
tiff - several vulnerabilities
2009-07-1500:00:00
Google
osv.dev
16
EPSS
0.006
Percentile
78.4%
Several vulnerabilities have been discovered in the library for the
Tag Image File Format (TIFF). The Common Vulnerabilities and Exposures
project identifies the following problems:
- CVE-2009-2285
It was discovered that malformed TIFF images can lead to a crash
in the decompression code, resulting in denial of service. - CVE-2009-2347
Andrea Barisani discovered several integer overflows, which
can lead to the execution of arbitrary code if malformed
images are passed to the rgb2ycbcr or tiff2rgba tools.
For the old stable distribution (etch), these problems have been fixed
in version 3.8.2-7+etch3.
For the stable distribution (lenny), these problems have been fixed in
version 3.8.2-11.2.
For the unstable distribution (sid), these problems will be fixed soon.
We recommend that you upgrade your tiff packages.
References
Related
nessus
nessus
RHEL 3 / 4 / 5 : libtiff (RHSA-2009:1159)
2009-07-17 00:00:00
CentOS 3 / 5 : libtiff (CESA-2009:1159)
2009-07-23 00:00:00
Solaris 10 (sparc) : 119900-16
2018-03-12 00:00:00
openvas
openvas
Fedora Core 11 FEDORA-2009-7775 (libtiff)
2009-07-29 00:00:00
CentOS Update for libtiff CESA-2009:1159 centos5 i386
2011-08-09 00:00:00
CentOS Security Advisory CESA-2009:1159 (libtiff)
2009-07-29 00:00:00
gentoo
gentoo
libTIFF: User-assisted execution of arbitrary code
2009-08-07 00:00:00
libTIFF: Multiple vulnerabilities
2012-09-23 00:00:00
fedora
fedora
[SECURITY] Fedora 10 Update: libtiff-3.8.2-14.fc10
2009-07-19 10:12:56
[SECURITY] Fedora 11 Update: libtiff-3.8.2-14.fc11
2009-07-19 10:30:18
[SECURITY] Fedora 10 Update: libtiff-3.8.2-13.fc10
2009-07-03 19:44:57
debian
debian
[SECURITY] [DSA 1835-1] New tiff packages fix several vulnerabilities
2009-07-15 19:20:19
redhat
redhat
(RHSA-2009:1159) Moderate: libtiff security update
2009-07-16 00:00:00
oraclelinux
oraclelinux
libtiff security update
2009-07-16 00:00:00
securityvulns
securityvulns
libtiff multiple security vulnerabilities
2009-07-14 00:00:00
[oCERT-2009-012] libtiff tools integer overflows
2009-07-14 00:00:00
About the security content of iTunes 9.1
2010-08-19 00:00:00
centos
centos
libtiff security update
2009-07-22 22:35:54
prion
prion
Integer overflow
2009-07-14 20:30:00
Buffer overflow
2009-07-01 13:00:00
cve
cve
CVE-2009-2347
2009-07-14 20:30:00
CVE-2009-2285
2009-07-01 13:00:01
altlinux
altlinux
Security fix for the ALT Linux 5 package libtiff version 3.8.2-alt5
2009-07-15 00:00:00
Security fix for the ALT Linux 10 package libtiff version 3.8.2-alt5
2009-07-15 00:00:00
cvelist
cvelist
CVE-2009-2347
2009-07-14 20:16:00
CVE-2009-2285
2009-07-01 12:26:00
nvd
nvd
CVE-2009-2347
2009-07-14 20:30:00
CVE-2009-2285
2009-07-01 13:00:01
ubuntucve
ubuntucve
CVE-2009-2347
2009-07-14 00:00:00
CVE-2009-2285
2009-07-01 00:00:00
exploitdb
exploitdb
LibTIFF 3.8.2 - 'LZWDecodeCompat()' Remote Buffer Underflow
2009-05-21 00:00:00
LibTIFF - 'LZWDecodeCompat()' Remote Buffer Underflow
2009-11-12 00:00:00
ubuntu
ubuntu
tiff vulnerability
2009-07-06 00:00:00
tiff vulnerability
2009-07-13 00:00:00
seebug
seebug
LibTIFF库tiff2rgba和rgb2ycbcr转换工具整数溢出漏洞
2009-07-14 00:00:00
debiancve
debiancve
CVE-2009-2347
2009-07-14 20:30:00
CVE-2009-2285
2009-07-01 13:00:01
freebsd
freebsd
tiff -- Multiple integer overflows
2009-05-22 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:36:26
Denial Of Service (DoS)
2020-04-10 00:36:26
threatpost
threatpost
Apple Patches 12 Serious Mac OS X Flaws
2010-01-19 21:27:36
Apple Plugs Critical iPhone Security Holes
2010-02-02 19:05:36
osv
osv
libtiff-devel-32bit-4.0.7-1.1 on GA media
2024-06-15 00:00:00