Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

Privacy Policy
Terms of Service
Contact

CVE-2008-2327 — MEDIUM severity vulnerability | Release Alert

CVE-2008-2327

6.8

MEDIUMCVSS v2

Published

August 27, 2008

Affected

4 projects

Assigned by

MITRE

Severity scale

010

Description

Multiple buffer underflows in the (1) LZWDecode, (2) LZWDecodeCompat, and (3) LZWDecodeVector functions in tif_lzw.c in the LZW decoder in LibTIFF 3.8.2 and earlier allow context-dependent attackers to execute arbitrary code via a crafted TIFF file, related to improper handling of the CODE_CLEAR code.

libtiff/libtiff

GitLabTIFF Library and Utilities

= 3.6.1, = 3.8.0, = 3.8.1, = 3.4, = 3.5.7, = 3.7.0, = 3.6.0, = 3.5.3, = 3.7.1, = 3.5.1, = 3.5.6, <= 3.8.2, = 3.5.2, = 3.5.4, = 3.5.5NVD

rzkn/libtiff

GitLab

= 3.6.1, = 3.8.0, = 3.8.1, = 3.4, = 3.5.7, = 3.7.0, = 3.6.0, = 3.5.3, = 3.7.1, = 3.5.1, = 3.5.6, <= 3.8.2, = 3.5.2, = 3.5.4, = 3.5.5NVD

vadz/libtiff

More on this CVE

NVD↗GitHub Advisory↗

GitHub

OBSOLETE and not updated any more libtiff mirror, see website for the new one

= 3.6.1, = 3.8.0, = 3.8.1, = 3.4, = 3.5.7, = 3.7.0, = 3.6.0, = 3.5.3, = 3.7.1, = 3.5.1, = 3.5.6, <= 3.8.2, = 3.5.2, = 3.5.4, = 3.5.5NVD

libsdl-org/libtiff

GitHubTIFF decoding library from https://gitlab.com/libtiff/libtiff

= 3.6.1, = 3.8.0, = 3.8.1, = 3.4, = 3.5.7, = 3.7.0, = 3.6.0, = 3.5.3, = 3.7.1, = 3.5.1, = 3.5.6, <= 3.8.2, = 3.5.2, = 3.5.4, = 3.5.5NVD