SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

OVAL

LibTIFF - (bulletinjul2018)

ID: oval:org.secpod.oval:def:2103100	Date: (C)2020-01-19 (M)2023-03-08
Class: PATCH	Family: unix

In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tif_lzw.c via a crafted TIFF file, as demonstrated by tiff2ps.

Platform:

Sun Solaris 11

Product:

x11/server/xvnc

x11/library/toolkit/fltk

system/display-manager/gdm

system/display-manager/desktop-startup

library/glib2

library/gd

image/library/libtiff

desktop/remote-desktop/tigervnc

Reference:

bulletinjul2018

CVE-2018-8905


30430



423868



247862



909



194603



282