libTIFF: User-assisted execution of arbitrary code

Background libTIFF provides support for reading and manipulating TIFF Tagged Image File Format images. Description Drew Yao Apple Product Security and Clay Wood reported multiple buffer underflows in the LZWDecode and LZWDecodeCompat functions in tiflzw.c when processing TIFF files. Impact A remo...

CVE-2008-2327

CVE-2008-2327 affects LibTIFF 3.8.2 and earlier, with multiple buffer underflows in the LZW decoder (LZWDecode, LZWDecodeCompat, LZWDecodeVector) in tif_lzw.c that allow context-dependent attackers to execute arbitrary code via a crafted TIFF file due to improper handling of the CODE_CLEAR. Conne...

CVE-2008-2327

Multiple buffer underflows in the 1 LZWDecode, 2 LZWDecodeCompat, and 3 LZWDecodeVector functions in tiflzw.c in the LZW decoder in LibTIFF 3.8.2 and earlier allow context-dependent attackers to execute arbitrary code via a crafted TIFF file, related to improper handling of the CODECLEAR code...