Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-2327
HistoryAug 27, 2008 - 12:00 a.m.

CVE-2008-2327

2008-08-2700:00:00
ubuntu.com
ubuntu.com
13

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.6%

Multiple buffer underflows in the (1) LZWDecode, (2) LZWDecodeCompat, and
(3) LZWDecodeVector functions in tif_lzw.c in the LZW decoder in LibTIFF
3.8.2 and earlier allow context-dependent attackers to execute arbitrary
code via a crafted TIFF file, related to improper handling of the
CODE_CLEAR code.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchtiff<Β 3.7.4-1ubuntu3.3UNKNOWN
ubuntu7.04noarchtiff<Β 3.8.2-6ubuntu1UNKNOWN
ubuntu7.10noarchtiff<Β 3.8.2-7ubuntu2.1UNKNOWN
ubuntu8.04noarchtiff<Β 3.8.2-7ubuntu3.1UNKNOWN

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.6%