Lucene search
UbuntuUSN-797-1HistoryJul 06, 2009 - 12:00 a.m.
tiff vulnerability
2009-07-0600:00:00
ubuntu.com
38
6.6 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.003 Low
EPSS
Percentile
64.7%
Releases
- Ubuntu 9.04
- Ubuntu 8.10
- Ubuntu 8.04
- Ubuntu 6.06
Packages
- tiff -
Details
It was discovered that the TIFF library did not correctly handle certain
malformed TIFF images. If a user or automated system were tricked into
processing a malicious image, a remote attacker could cause an application
linked against libtiff to crash, leading to a denial of service.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 9.04 | noarch | libtiff4 | < 3.8.2-11ubuntu0.9.04.1 | UNKNOWN |
| Ubuntu | 9.04 | noarch | libtiff-opengl | < 3.8.2-11ubuntu0.9.04.1 | UNKNOWN |
| Ubuntu | 9.04 | noarch | libtiff-tools | < 3.8.2-11ubuntu0.9.04.1 | UNKNOWN |
| Ubuntu | 9.04 | noarch | libtiff4 | < dev-3.8.2-11ubuntu0.9.04.1 | UNKNOWN |
| Ubuntu | 9.04 | noarch | libtiffxx0c2 | < 3.8.2-11ubuntu0.9.04.1 | UNKNOWN |
| Ubuntu | 8.10 | noarch | libtiff4 | < 3.8.2-11ubuntu0.8.10.1 | UNKNOWN |
| Ubuntu | 8.10 | noarch | libtiff-opengl | < 3.8.2-11ubuntu0.8.10.1 | UNKNOWN |
| Ubuntu | 8.10 | noarch | libtiff-tools | < 3.8.2-11ubuntu0.8.10.1 | UNKNOWN |
| Ubuntu | 8.10 | noarch | libtiff4 | < dev-3.8.2-11ubuntu0.8.10.1 | UNKNOWN |
| Ubuntu | 8.10 | noarch | libtiffxx0c2 | < 3.8.2-11ubuntu0.8.10.1 | UNKNOWN |
References
Related
fedora
fedora
[SECURITY] Fedora 10 Update: libtiff-3.8.2-13.fc10
2009-07-03 19:44:57
[SECURITY] Fedora 11 Update: mingw32-libtiff-3.8.2-17.fc11
2009-07-19 10:24:35
[SECURITY] Fedora 10 Update: mingw32-libtiff-3.8.2-17.fc10
2009-07-19 10:11:47
nessus
nessus
Fedora 9 : libtiff-3.8.2-13.fc9 (2009-7335)
2009-07-06 00:00:00
Fedora 10 : mingw32-libtiff-3.8.2-17.fc10 (2009-7717)
2009-07-20 00:00:00
Fedora 10 : libtiff-3.8.2-13.fc10 (2009-7358)
2009-07-06 00:00:00
openvas
openvas
SLES9: Security update for libtiff
2009-10-10 00:00:00
SLES10: Security update for libtiff
2009-10-13 00:00:00
SLES11: Security update for libtiff3
2009-10-11 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:36:26
gentoo
gentoo
libTIFF: User-assisted execution of arbitrary code
2009-08-07 00:00:00
cve
cve
CVE-2009-2285
2009-07-01 13:00:00
prion
prion
Buffer overflow
2009-07-01 13:00:00
oraclelinux
oraclelinux
libtiff security update
2009-07-16 00:00:00
osv
osv
tiff - several vulnerabilities
2009-07-15 00:00:00
redhat
redhat
(RHSA-2009:1159) Moderate: libtiff security update
2009-07-16 00:00:00
securityvulns
securityvulns
libtiff multiple security vulnerabilities
2009-07-14 00:00:00
About the security content of iTunes 9.1
2010-08-19 00:00:00
Apple iTunes multiple security uvlnerabilities
2010-08-19 00:00:00
ubuntucve
ubuntucve
CVE-2009-2285
2009-07-01 00:00:00
centos
centos
libtiff security update
2009-07-22 22:35:54
debiancve
debiancve
CVE-2009-2285
2009-07-01 13:00:00
debian
debian
[SECURITY] [DSA 1835-1] New tiff packages fix several vulnerabilities
2009-07-15 19:20:19
threatpost
threatpost
Apple Patches 12 Serious Mac OS X Flaws
2010-01-19 21:27:36
Apple Plugs Critical iPhone Security Holes
2010-02-02 19:05:36
6.6 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.003 Low
EPSS
Percentile
64.7%
Related for USN-797-1