NVD

Id
2247  
Name
CVE-2008-2327  
Description
Multiple buffer underflows in the (1) LZWDecode, (2) LZWDecodeCompat, and (3) LZWDecodeVector functions in tif_lzw.c in the LZW decoder in LibTIFF 3.8.2 and earlier allow context-dependent attackers to execute arbitrary code via a crafted TIFF file, related to improper handling of the CODE_CLEAR code.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-08-27  
Modified Date
2012-10-30  
Seq
2008-2327  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
14311 2247 CVE-2008-2327 http://bugs.gentoo.org/show_bug.cgi?id=234080  View
14312 2247 CVE-2008-2327 APPLE-SA-2008-11-13  View
14313 2247 CVE-2008-2327 APPLE-SA-2008-09-15  View
14314 2247 CVE-2008-2327 APPLE-SA-2008-11-20  View
14315 2247 CVE-2008-2327 SUSE-SR:2008:018  View
14316 2247 CVE-2008-2327 oval:org.mitre.oval:def:11489  View
14317 2247 CVE-2008-2327 oval:org.mitre.oval:def:5514  View
14318 2247 CVE-2008-2327 http://security-tracker.debian.net/tracker/CVE-2008-2327  View
14319 2247 CVE-2008-2327 http://security-tracker.debian.net/tracker/DSA-1632-1  View
14320 2247 CVE-2008-2327 http://security-tracker.debian.net/tracker/DTSA-160-1  View
14321 2247 CVE-2008-2327 GLSA-200809-07  View
14322 2247 CVE-2008-2327 265030  View
14323 2247 CVE-2008-2327 http://support.apple.com/kb/HT3276  View
14324 2247 CVE-2008-2327 http://support.apple.com/kb/HT3298  View
14325 2247 CVE-2008-2327 http://support.apple.com/kb/HT3318  View
14326 2247 CVE-2008-2327 DSA-1632  View
14327 2247 CVE-2008-2327 MDVSA-2008:184  View
14328 2247 CVE-2008-2327 RHSA-2008:0847  View
14329 2247 CVE-2008-2327 RHSA-2008:0848  View
14330 2247 CVE-2008-2327 RHSA-2008:0863  View
14331 2247 CVE-2008-2327 20080905 rPSA-2008-0268-1 libtiff  View
14332 2247 CVE-2008-2327 20081031 VMSA-2008-0017 Updated ESX packages for libxml2, ucd-snmp, libtiff  View
14333 2247 CVE-2008-2327 30832  View
14334 2247 CVE-2008-2327 1020750  View
14335 2247 CVE-2008-2327 USN-639-1  View
14336 2247 CVE-2008-2327 TA08-260A  View
14337 2247 CVE-2008-2327 http://www.vmware.com/security/advisories/VMSA-2008-0017.html  View
14338 2247 CVE-2008-2327 ADV-2008-2438  View
14339 2247 CVE-2008-2327 ADV-2008-2584  View
14340 2247 CVE-2008-2327 ADV-2008-2776  View
14341 2247 CVE-2008-2327 ADV-2008-2971  View
14342 2247 CVE-2008-2327 ADV-2008-3107  View
14343 2247 CVE-2008-2327 ADV-2008-3232  View
14344 2247 CVE-2008-2327 ADV-2009-2143  View
14345 2247 CVE-2008-2327 https://bugzilla.redhat.com/show_bug.cgi?id=458674  View
14346 2247 CVE-2008-2327 FEDORA-2008-7370  View
14347 2247 CVE-2008-2327 FEDORA-2008-7388  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46353 JVNDB-2008-001663 LibTIFF の tif_lzw.c におけるバッファアンダーフローの脆弱性 LibTIFF の LZW デコーダーには、tif_lzw.c の LZWDecode、LZWDecodeCompat、LZWDecodeVector 関数において TIFF ファイルの処理に不備があるためバッファアンダーフローの脆弱性が存在します。 CVE-2008-2327 32440 CVE-2008-2327 2247 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001663.html 2008-08-27 2009-08-28 View