CVE-2008-2327

Multiple buffer underflows in the (1) LZWDecode, (2) LZWDecodeCompat, and (3) LZWDecodeVector functions in tif_lzw.c in the LZW decoder in LibTIFF 3.8.2 and…

published August 27, 2008

CVSS
—
EPSS
4%
Percentile
90.8
In the wild
Unconfirmed
What it is

Multiple buffer underflows in the (1) LZWDecode, (2) LZWDecodeCompat, and (3) LZWDecodeVector functions in tif_lzw.c in the LZW decoder in LibTIFF 3.8.2 and earlier allow context-dependent attackers to execute arbitrary code via a crafted TIFF file, related to improper handling of the CODE_CLEAR code.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04130 · 90.8th percentile
Published
2008-08-27T20:00Z
EPSS history
Timeline
  • 27 AUG 20:00Z
    Multiple buffer underflows in the (1) LZWDecode, (2) LZWDecodeCompat, and (3) LZWDecodeVector functions in tif_lzw.c in the LZW decoder in LibTIFF 3.8.2 and…
    cvelistv5