Skip to content
OpenAdvisories
Unscored DSA-1835-1 2 CVEs

tiff - several vulnerabilities

Published Jul 15, 2009 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 4.0 tiff 3.8.2-7+etch3
Debian · 5.0 tiff 3.8.2-11.2

Vulnerabilities 2

  • Unscored —
    CVE-2009-2285 Public exploit

    Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial …

  • Unscored —

    Multiple integer overflows in inter-color spaces conversion tools in libtiff 3.8 through 3.8.2, 3.9, and 4.0 allow cont…