PT-2005-1087 · Tiff+1 · Tiff+1

Tavis Ormandy · Published 2005-05-10 · Updated 2017-07-11 · CVE-2005-1544

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions libTIFF versions prior to 3.7.2 tiff package versions prior to 3.7.2

Description The issue is related to a stack-based buffer overflow in libTIFF, which can be triggered by a TIFF file with a malformed BitsPerSample tag. This can allow remote attackers to execute arbitrary code. The exploitation of this issue may lead to a violation of confidentiality, integrity, and availability of protected information, and it can be exploited remotely.

Recommendations For libTIFF versions prior to 3.7.2, update to version 3.7.2 or later to resolve the issue. For tiff package versions prior to 3.7.2, update to version 3.7.2 or later to resolve the issue.

Exploit

Fix

Related Identifiers

BDU:2015-09475

CVE-2005-1544

DSA-755-1

Affected Products

Libtiff

Tiff

References · 23

• 🔥 https://exploit-db.com/exploits/1554 · Exploit
• http://bugs.gentoo.org/show_bug.cgi?id=91584 · Patch
• https://osv.dev/vulnerability/CVE-2005-1544 · Vendor Advisory
• ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.3/SCOSA-2006.3.txt · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2006:042 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-1544 · Security Note
• http://ubuntu.com/usn/usn-130-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2005-1544 · Vendor Advisory
• http://debian.org/security/2005/dsa-755 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09475 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-1544 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200505-07.xml · Vendor Advisory
• ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.34/SCOSA-2005.34.txt · Vendor Advisory
• http://securitytracker.com/id?1013944 · Note
• http://secunia.com/advisories/16872 · Note