← Database

CVE-2009-2285

MEDIUM CVSS: 4.3 Published: 2009-07-01 Modified: 2026-06-16

Description

Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial of service (crash) via a crafted TIFF image, a different vulnerability than CVE-2008-2327.

Affected Platforms

Libtiff Libtiff

Weakness Type

CWE-119

References