CVE-2005-1544

Published: May 14, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag.

Affected (12)

Products: Libtiff: Libtiff

1 product

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Libtiff Libtiff	Version 3.4
Libtiff Libtiff	Version 3.5.1
Libtiff Libtiff	Version 3.5.2
Libtiff Libtiff	Version 3.5.3
Libtiff Libtiff	Version 3.5.4
Libtiff Libtiff	Version 3.5.5
Libtiff Libtiff	Version 3.5.6
Libtiff Libtiff	Version 3.5.7
Libtiff Libtiff	Version 3.6.0
Libtiff Libtiff	Version 3.6.1
Libtiff Libtiff	Version 3.7.0
Libtiff Libtiff	Version 3.7.1

References (32)

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.3/SCOSA-2006.3.txt (unsafe URL)

Source: cve@mitre.org

ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.34/SCOSA-2005.34.txt (unsafe URL)

Source: cve@mitre.org

http://bugs.gentoo.org/show_bug.cgi?id=91584

Source: cve@mitre.org

Patch

http://bugzilla.remotesensing.org/show_bug.cgi?id=843

Source: cve@mitre.org

http://secunia.com/advisories/15320

Source: cve@mitre.org

http://secunia.com/advisories/16872

Source: cve@mitre.org

http://secunia.com/advisories/18289

Source: cve@mitre.org

http://secunia.com/advisories/18943

Source: cve@mitre.org

http://securitytracker.com/id?1013944

Source: cve@mitre.org

http://www.debian.org/security/2005/dsa-755

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200505-07.xml

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2006:042

Source: cve@mitre.org

http://www.osvdb.org/16350

Source: cve@mitre.org

http://www.securityfocus.com/bid/13585

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-130-1

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/20533

Source: cve@mitre.org

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.3/SCOSA-2006.3.txt (unsafe URL)

Source: af854a3a-2127-422b-91ae-364da2661108

ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.34/SCOSA-2005.34.txt (unsafe URL)

Source: af854a3a-2127-422b-91ae-364da2661108

http://bugs.gentoo.org/show_bug.cgi?id=91584

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://bugzilla.remotesensing.org/show_bug.cgi?id=843

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/15320

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/16872

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/18289

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/18943

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1013944

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2005/dsa-755

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gentoo.org/security/en/glsa/glsa-200505-07.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2006:042

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/16350

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/13585

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-130-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/20533

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.