PT-2005-1087 · Tiff+1 · Tiff+1

Tavis Ormandy · Publicado 2005-05-10 · Atualizado 2017-07-11 · CVE-2005-1544

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions libTIFF versions prior to 3.7.2 tiff package versions prior to 3.7.2

Description The issue is related to a stack-based buffer overflow in libTIFF, which can be triggered by a TIFF file with a malformed BitsPerSample tag. This can allow remote attackers to execute arbitrary code. The exploitation of this issue may lead to a violation of confidentiality, integrity, and availability of protected information, and it can be exploited remotely.

Recommendations For libTIFF versions prior to 3.7.2, update to version 3.7.2 or later to resolve the issue. For tiff package versions prior to 3.7.2, update to version 3.7.2 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

BDU:2015-09475

CVE-2005-1544

DSA-755-1

Produtos afetados

Libtiff

Tiff

Referências · 23

• 🔥 https://exploit-db.com/exploits/1554 · Exploit
• http://bugs.gentoo.org/show_bug.cgi?id=91584 · Correção
• http://securitytracker.com/id?1013944 · Nota
• https://osv.dev/vulnerability/CVE-2005-1544 · Aviso do Fabricante
• ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.3/SCOSA-2006.3.txt · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDKSA-2006:042 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-1544 · Nota de Segurança
• http://ubuntu.com/usn/usn-130-1 · Aviso do Fabricante
• http://secunia.com/advisories/16872 · Nota
• http://bugzilla.remotesensing.org/show_bug.cgi?id=843 · Nota
• https://security-tracker.debian.org/tracker/CVE-2005-1544 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20533 · Nota
• http://security.gentoo.org/glsa/glsa-200505-07.xml · Nota
• http://secunia.com/advisories/18289 · Nota
• http://securityfocus.com/bid/13585 · Nota