CVE-2009-2285

Exploit

EPSS 8%
Veröffentlicht 01.07.2009 13:00:01
Zuletzt bearbeitet 16.06.2026 23:09:08
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial of service (crash) via a crafted TIFF image, a different vulnerability than CVE-2008-2327.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 44

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Libtiff ≫ Libtiff Version3.8.2

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	8%	0.94

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:P/I:N/A:N

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html

http://support.apple.com/kb/HT3937

http://www.vupen.com/english/advisories/2009/3184

http://bugzilla.maptools.org/show_bug.cgi?id=2065

Exploit

http://lists.apple.com/archives/security-announce/2010//Mar/msg00003.html

http://lists.apple.com/archives/security-announce/2010/Feb/msg00000.html

http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html

http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html

http://secunia.com/advisories/35695

http://secunia.com/advisories/35716

http://secunia.com/advisories/35866

http://secunia.com/advisories/35883

http://secunia.com/advisories/35912

http://secunia.com/advisories/36194

http://secunia.com/advisories/36831

http://secunia.com/advisories/38241

http://secunia.com/advisories/39135

http://security.gentoo.org/glsa/glsa-200908-03.xml

http://sunsolve.sun.com/search/document.do?assetkey=1-66-267808-1

http://support.apple.com/kb/HT4004

http://support.apple.com/kb/HT4013

http://support.apple.com/kb/HT4070

http://support.apple.com/kb/HT4105

http://www.debian.org/security/2009/dsa-1835

http://www.lan.st/showthread.php?t=1856&page=3

Exploit

http://www.openwall.com/lists/oss-security/2009/06/22/1

Exploit

http://www.openwall.com/lists/oss-security/2009/06/23/1

http://www.openwall.com/lists/oss-security/2009/06/29/5

Exploit

http://www.redhat.com/support/errata/RHSA-2009-1159.html

http://www.vupen.com/english/advisories/2009/1637

http://www.vupen.com/english/advisories/2009/2727

http://www.vupen.com/english/advisories/2010/0173

https://bugs.launchpad.net/ubuntu/+source/tiff/+bug/380149

Exploit

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10145

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7049

https://usn.ubuntu.com/797-1/

https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00142.html

https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00161.html

https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00230.html

https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00655.html

https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00714.html

https://nvd.nist.gov/vuln/detail/CVE-2009-2285

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-2285

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-2285

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2009-2285