libtiff: denial of service [LWN.net]

Package(s):

libtiff

CVE #(s):

CVE-2009-2285

Created:

July 6, 2009

Updated:

December 4, 2009

Description:

From the CVE entry:

Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial of service (crash) via a crafted TIFF image, a different vulnerability than CVE-2008-2327.

Alerts:

Mandriva	MDVSA-2009:169-1	2009-12-03
SuSE	SUSE-SR:2009:013	2009-08-11
Gentoo	200908-03	2009-08-07
Mandriva	MDVSA-2009:169	2009-07-28
CentOS	CESA-2009:1159	2009-07-23
Fedora	FEDORA-2009-7775	2009-07-19
Fedora	FEDORA-2009-7724	2009-07-19
Fedora	FEDORA-2009-7717	2009-07-19
Red Hat	RHSA-2009:1159-01	2009-07-16
Debian	DSA-1835-1	2009-07-15
Mandriva	MDVSA-2009:150	2009-07-13
Ubuntu	USN-797-1	2009-07-06
Fedora	FEDORA-2009-7417	2009-07-03
Fedora	FEDORA-2009-7358	2009-07-03
Fedora	FEDORA-2009-7335	2009-07-03
Oracle	ELSA-2012-0468	2012-04-12

(Log in to post comments)