CVE-2008-2327

Опубликовано: 27 авг. 2008

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Multiple buffer underflows in the (1) LZWDecode, (2) LZWDecodeCompat, and (3) LZWDecodeVector functions in tif_lzw.c in the LZW decoder in LibTIFF 3.8.2 and earlier allow context-dependent attackers to execute arbitrary code via a crafted TIFF file, related to improper handling of the CODE_CLEAR code.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*

Версия до 3.8.2 (включая)

cpe:2.3:a:libtiff:libtiff:3.4:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.5.1:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.5.2:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.5.3:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.5.4:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.5.5:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.5.6:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.5.7:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.6.0:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.6.1:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.7.0:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.7.1:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.8.0:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.8.1:*:*:*:*:*:*:*

EPSS

Процентиль: 82%

0.01918

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2008-2327

ubuntu

почти 17 лет назад

CVE-2008-2327

redhat

почти 17 лет назад

CVE-2008-2327

debian

почти 17 лет назад

Multiple buffer underflows in the (1) LZWDecode, (2) LZWDecodeCompat, ...

GHSA-948h-p4jx-fxj7

github

около 3 лет назад

ELSA-2008-0847

oracle-oval

почти 17 лет назад

ELSA-2008-0847: libtiff security and bug fix update (IMPORTANT)

EPSS

Процентиль: 82%

0.01918

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-119