CVE-2009-2285

보통 4.3CVE-2009-2285 · Published 01/07/2009 · updated 16/06/2026

요약

CVE-2009-2285은(는) libtiff (libtiff)에 영향을 주는 보통 (CVSS 4.3) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 8.9%, 전체 취약점의 95.3%보다 높음.
아직 패치 버전 정보가 없습니다. 참고 자료의 공급업체 권고를 확인하세요.

Package	Affected versions	Patched versions
libtiff libtiff	`= 3.8.2`	No fix yet

Description

Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial of service (crash) via a crafted TIFF image, a different vulnerability than CVE-2008-2327.

References

bugzilla.maptools.org/show_bug.cgi · Exploit
lists.apple.com/archives/security-announce/2009/Nov/msg00000.html
lists.apple.com/archives/security-announce/2010//Mar/msg00003.html
lists.apple.com/archives/security-announce/2010/Feb/msg00000.html
lists.apple.com/archives/security-announce/2010/Jan/msg00000.html
lists.apple.com/archives/security-announce/2010/Mar/msg00000.html
secunia.com/advisories/35695
secunia.com/advisories/35716
secunia.com/advisories/35866
secunia.com/advisories/35883
secunia.com/advisories/35912
secunia.com/advisories/36194
secunia.com/advisories/36831
secunia.com/advisories/38241
secunia.com/advisories/39135

libtiff의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free