A vulnerability has been reported in LibTIFF, which can be exploited by malicious people to cause a DoS (Denial of Service) or to potentially compromise a user's system.
The vulnerability is caused due to errors within the "LZWDecode()" and "LZWDecodeCompat()" functions in libtiff/tif_lzw.c. These can be exploited to cause a buffer underflow via a specially crafted TIFF file.
The vulnerability is reported in version 3.8.2. Other versions may also be affected.
Solution: Do not process untrusted TIFF files using LibTIFF.
Provided and/or discovered by: Debian credits Drew Yao of Apple Product Security.
Original Advisory: http://security-tracker.debian.net/tracker/CVE-2008-2327
Do you have additional information related to this advisory?
Please provide information about patches, mitigating factors, new versions, exploits, faulty patches, links, and other relevant data by posting comments to this Advisory. You can also send this
information to firstname.lastname@example.org