Your submission was sent successfully! Close

You have successfully unsubscribed! Close

CVE-2009-2285

Published: 1 July 2009

Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial of service (crash) via a crafted TIFF image, a different vulnerability than CVE-2008-2327.

Priority

Medium

Status

Package Release Status
tiff
Launchpad, Ubuntu, Debian
upstream Needs triage

dapper
Released (3.7.4-1ubuntu3.4)
hardy
Released (3.8.2-7ubuntu3.2)
intrepid
Released (3.8.2-11ubuntu0.8.10.1)
jaunty
Released (3.8.2-11ubuntu0.9.04.1)
Patches:
upstream: http://bugzilla.maptools.org/attachment.cgi?id=279