HTTP: IrfanView TIF Image Decompression Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the JPEG compressed TIF image handling of IrfanView image viewing application. A successful attack could allow the attacker to execute arbitrary code on the targeted system. Failed exploit attempts could result in a denial of service condition.

Extended Description

LibTIFF is prone to multiple buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data. An attacker can exploit these issues to execute arbitrary malicious code in the context of a user running an application that uses the affected library. Failed exploit attempts will likely crash the application. LibTIFF versions prior to 3.9.5 are affected.

Affected Products

Avaya 96x1_ip_deskphone,Debian linux

References

BugTraq: 47338

CVE: CVE-2009-5022

Short Name

HTTP:STC:DL:IRFANVIEW-TIF-DC-BO

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: IrfanView TIF Image Decompression Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?