CVE-2008-2327

Published: 27 August 2008

Multiple buffer underflows in the (1) LZWDecode, (2) LZWDecodeCompat, and (3) LZWDecodeVector functions in tif_lzw.c in the LZW decoder in LibTIFF 3.8.2 and earlier allow context-dependent attackers to execute arbitrary code via a crafted TIFF file, related to improper handling of the CODE_CLEAR code.

Status

References

• https://ubuntu.com/security/notices/USN-639-1
• https://www.cve.org/CVERecord?id=CVE-2008-2327
• NVD
• Launchpad
• Debian