Security Advisory

CVE-2008-2327

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-08-27 20:00:00

Last updated 2024-08-07 08:58:01

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Multiple buffer underflows in the (1) LZWDecode, (2) LZWDecodeCompat, and (3) LZWDecodeVector functions in tif_lzw.c in the LZW decoder in LibTIFF 3.8.2 and earlier allow context-dependent attackers to execute arbitrary code via a crafted TIFF file, related to improper handling of the CODE_CLEAR code.

← Browse all CVEs View on cve.org ↗