Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-1167
HistoryMar 28, 2011 - 12:00 a.m.

CVE-2011-1167

2011-03-2800:00:00
ubuntu.com
ubuntu.com
12

0.239 Low

EPSS

Percentile

96.6%

Heap-based buffer overflow in the thunder (aka ThunderScan) decoder in
tif_thunder.c in LibTIFF 3.9.4 and earlier allows remote attackers to
execute arbitrary code via crafted THUNDER_2BITDELTAS data in a .tiff file
that has an unexpected BitsPerSample value.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchtiff< 3.7.4-1ubuntu3.11UNKNOWN
ubuntu8.04noarchtiff< 3.8.2-7ubuntu3.9UNKNOWN
ubuntu9.10noarchtiff< 3.8.2-13ubuntu0.6UNKNOWN
ubuntu10.04noarchtiff< 3.9.2-2ubuntu0.6UNKNOWN
ubuntu10.10noarchtiff< 3.9.4-2ubuntu0.3UNKNOWN