A security vulnerability in the LZW decoding function of the Solaris Tag Image File Format Library libtiff(3) may allow a local or remote unprivileged user to crash applications that use this function via a crafted TIFF image. The ability to crash an application is a type of Denial of Service (DoS).

This issue is also described in the following document:

• CVE-2009-2285 at: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2285
  

Permalink |