ghsa-ggpg-hpjr-gqrh
Vulnerability from github
Published
2022-05-02 03:33
Modified
2022-05-02 03:33
Details
Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial of service (crash) via a crafted TIFF image, a different vulnerability than CVE-2008-2327.
{ "affected": [], "aliases": [ "CVE-2009-2285" ], "database_specific": { "cwe_ids": [ "CWE-119" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2009-07-01T13:00:00Z", "severity": "MODERATE" }, "details": "Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial of service (crash) via a crafted TIFF image, a different vulnerability than CVE-2008-2327.", "id": "GHSA-ggpg-hpjr-gqrh", "modified": "2022-05-02T03:33:35Z", "published": "2022-05-02T03:33:35Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2285" }, { "type": "WEB", "url": "https://bugs.launchpad.net/ubuntu/+source/tiff/+bug/380149" }, { "type": "WEB", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10145" }, { "type": "WEB", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7049" }, { "type": "WEB", "url": "https://usn.ubuntu.com/797-1" }, { "type": "WEB", "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00142.html" }, { "type": "WEB", "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00161.html" }, { "type": "WEB", "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00230.html" }, { "type": "WEB", "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00655.html" }, { "type": "WEB", "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00714.html" }, { "type": "WEB", "url": "http://bugzilla.maptools.org/show_bug.cgi?id=2065" }, { "type": "WEB", "url": "http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html" }, { "type": "WEB", "url": "http://lists.apple.com/archives/security-announce/2010//Mar/msg00003.html" }, { "type": "WEB", "url": "http://lists.apple.com/archives/security-announce/2010/Feb/msg00000.html" }, { "type": "WEB", "url": "http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html" }, { "type": "WEB", "url": "http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html" }, { "type": "WEB", "url": "http://secunia.com/advisories/35695" }, { "type": "WEB", "url": "http://secunia.com/advisories/35716" }, { "type": "WEB", "url": "http://secunia.com/advisories/35866" }, { "type": "WEB", "url": "http://secunia.com/advisories/35883" }, { "type": "WEB", "url": "http://secunia.com/advisories/35912" }, { "type": "WEB", "url": "http://secunia.com/advisories/36194" }, { "type": "WEB", "url": "http://secunia.com/advisories/36831" }, { "type": "WEB", "url": "http://secunia.com/advisories/38241" }, { "type": "WEB", "url": "http://secunia.com/advisories/39135" }, { "type": "WEB", "url": "http://security.gentoo.org/glsa/glsa-200908-03.xml" }, { "type": "WEB", "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-267808-1" }, { "type": "WEB", "url": "http://support.apple.com/kb/HT3937" }, { "type": "WEB", "url": "http://support.apple.com/kb/HT4004" }, { "type": "WEB", "url": "http://support.apple.com/kb/HT4013" }, { "type": "WEB", "url": "http://support.apple.com/kb/HT4070" }, { "type": "WEB", "url": "http://support.apple.com/kb/HT4105" }, { "type": "WEB", "url": "http://www.debian.org/security/2009/dsa-1835" }, { "type": "WEB", "url": "http://www.lan.st/showthread.php?t=1856\u0026page=3" }, { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2009/06/22/1" }, { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2009/06/23/1" }, { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2009/06/29/5" }, { "type": "WEB", "url": "http://www.redhat.com/support/errata/RHSA-2009-1159.html" }, { "type": "WEB", "url": "http://www.vupen.com/english/advisories/2009/1637" }, { "type": "WEB", "url": "http://www.vupen.com/english/advisories/2009/2727" }, { "type": "WEB", "url": "http://www.vupen.com/english/advisories/2009/3184" }, { "type": "WEB", "url": "http://www.vupen.com/english/advisories/2010/0173" } ], "schema_version": "1.4.0", "severity": [] }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.