CVE-2009-5022

Related Files

Gentoo Linux Security Advisory 201209-02

Posted Sep 24, 2012

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201209-2 - Multiple vulnerabilities in libTIFF could result in execution of arbitrary code or Denial of Service. Versions less than 4.0.2-r1 are affected.

tags | advisory, denial of service, arbitrary, vulnerability

systems | linux, gentoo

advisories | CVE-2009-2347, CVE-2009-5022, CVE-2010-1411, CVE-2010-2065, CVE-2010-2067, CVE-2010-2233, CVE-2010-2443, CVE-2010-2481, CVE-2010-2482, CVE-2010-2483, CVE-2010-2595, CVE-2010-2596, CVE-2010-2597, CVE-2010-2630, CVE-2010-2631, CVE-2010-3087, CVE-2010-4665, CVE-2011-0192, CVE-2011-0192, CVE-2011-1167, CVE-2011-1167, CVE-2012-1173, CVE-2012-2088, CVE-2012-2113, CVE-2012-3401

SHA-256 | 4c1d531cd4481a5572a3c053df88570eab2536699dd069f5b711c89773f211c5

Download | Favorite | View

Debian Security Advisory 2256-1

Posted Jun 10, 2011

Authored by Debian | Site debian.org

Debian Linux Security Advisory 2256-1 - Tavis Ormandy discovered that the Tag Image File Format (TIFF) library is vulnerable to a buffer overflow triggered by a crafted OJPEG file which allows for a crash and potentially execution of arbitrary code.

tags | advisory, overflow, arbitrary

systems | linux, debian

advisories | CVE-2009-5022

SHA-256 | e1600c5d082ac38cf6e93ff939d309cdc92b47dab49ce83a8355639ef56428cd

Download | Favorite | View

Mandriva Linux Security Advisory 2011-078

Posted Apr 23, 2011

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2011-078 - The libtiff OJPEG decoder contains a heap buffer overflow when decoding certain malformed data. The updated packages have been patched to correct this issue.

tags | advisory, overflow

systems | linux, mandriva

advisories | CVE-2009-5022

SHA-256 | e6210332ba17e9cdae458081c53340ddfd8055e6279d57841904f56076d7368d

Download | Favorite | View

Ubuntu Security Notice USN-1120-1

Posted Apr 21, 2011

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 1120-1 - It was discovered that the TIFF library incorrectly handled certain JPEG data. If a user or automated system were tricked into opening a specially crafted TIFF image, a remote attacker could execute arbitrary code with user privileges, or crash the application, leading to a denial of service.

tags | advisory, remote, denial of service, arbitrary

systems | linux, ubuntu

advisories | CVE-2009-5022

SHA-256 | b07452b15b9bd47493da17c9b8107457a4deb3f3a8e3b4b9d2b8af8f82198122

Download | Favorite | View