CVE-2009-2285

中 4.3CVE-2009-2285 · 01/07/2009 公開 · 16/06/2026 更新

要点

CVE-2009-2285 は libtiff (libtiff) に影響する深刻度「中」 (CVSS 4.3) の脆弱性です。
今後30日間に悪用される確率（EPSS）：8.9%（全脆弱性の 95.3% より高い）。
修正版の情報はまだありません。参考情報のベンダー勧告を確認してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
libtiff libtiff	`= 3.8.2`	修正版なし

概要

Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial of service (crash) via a crafted TIFF image, a different vulnerability than CVE-2008-2327.

参考情報

bugzilla.maptools.org/show_bug.cgi · Exploit
lists.apple.com/archives/security-announce/2009/Nov/msg00000.html
lists.apple.com/archives/security-announce/2010//Mar/msg00003.html
lists.apple.com/archives/security-announce/2010/Feb/msg00000.html
lists.apple.com/archives/security-announce/2010/Jan/msg00000.html
lists.apple.com/archives/security-announce/2010/Mar/msg00000.html
secunia.com/advisories/35695
secunia.com/advisories/35716
secunia.com/advisories/35866
secunia.com/advisories/35883
secunia.com/advisories/35912
secunia.com/advisories/36194
secunia.com/advisories/36831
secunia.com/advisories/38241
secunia.com/advisories/39135
security.gentoo.org/glsa/glsa-200908-03.xml
sunsolve.sun.com/search/document.do
support.apple.com/kb/HT3937
support.apple.com/kb/HT4004
support.apple.com/kb/HT4013
support.apple.com/kb/HT4070
support.apple.com/kb/HT4105
debian.org/security/2009/dsa-1835
lan.st/showthread.php · Exploit
openwall.com/lists/oss-security/2009/06/22/1 · Exploit
openwall.com/lists/oss-security/2009/06/23/1
openwall.com/lists/oss-security/2009/06/29/5 · Exploit
redhat.com/support/errata/RHSA-2009-1159.html
vupen.com/english/advisories/2009/1637
vupen.com/english/advisories/2009/2727
vupen.com/english/advisories/2009/3184
vupen.com/english/advisories/2010/0173
bugs.launchpad.net/ubuntu/+source/tiff/+bug/380149 · Exploit
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10145
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7049
usn.ubuntu.com/797-1
redhat.com/archives/fedora-package-announce/2009-July/msg00142.html
redhat.com/archives/fedora-package-announce/2009-July/msg00161.html
redhat.com/archives/fedora-package-announce/2009-July/msg00230.html
redhat.com/archives/fedora-package-announce/2009-July/msg00655.html
redhat.com/archives/fedora-package-announce/2009-July/msg00714.html

libtiff のその他の脆弱性

すべて見る →

これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。

無料でサイトをスキャン