Vulnerability-Lookup

CVE-2005-1544 (GCVE-0-2005-1544)

Vulnerability from cvelistv5 – Published: 2005-05-14 04:00 – Updated: 2024-08-07 21:51

Summary

Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag.

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 29/100 over 2316 records in the last 180 days details

References

16 references

URL	Tags
http://www.debian.org/security/2005/dsa-755	vendor-advisoryx_refsource_DEBIAN
http://bugzilla.remotesensing.org/show_bug.cgi?id=843	x_refsource_MISC
http://secunia.com/advisories/18289	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/16872	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/15320	third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://secunia.com/advisories/18943	third-party-advisoryx_refsource_SECUNIA
http://www.osvdb.org/16350	vdb-entryx_refsource_OSVDB
http://securitytracker.com/id?1013944	vdb-entryx_refsource_SECTRACK
http://www.gentoo.org/security/en/glsa/glsa-20050…	vendor-advisoryx_refsource_GENTOO
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.ubuntu.com/usn/usn-130-1	vendor-advisoryx_refsource_UBUNTU
http://www.securityfocus.com/bid/13585	vdb-entryx_refsource_BID
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-20…	vendor-advisoryx_refsource_SCO
http://bugs.gentoo.org/show_bug.cgi?id=91584	x_refsource_MISC
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005…	vendor-advisoryx_refsource_SCO

Date Public

2005-05-10 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T21:51:50.277Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-755",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2005/dsa-755"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://bugzilla.remotesensing.org/show_bug.cgi?id=843"
          },
          {
            "name": "18289",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18289"
          },
          {
            "name": "16872",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/16872"
          },
          {
            "name": "15320",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/15320"
          },
          {
            "name": "libtiff-bitspersample-bo(20533)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20533"
          },
          {
            "name": "18943",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18943"
          },
          {
            "name": "16350",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/16350"
          },
          {
            "name": "1013944",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1013944"
          },
          {
            "name": "GLSA-200505-07",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200505-07.xml"
          },
          {
            "name": "MDKSA-2006:042",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:042"
          },
          {
            "name": "USN-130-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-130-1"
          },
          {
            "name": "13585",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/13585"
          },
          {
            "name": "SCOSA-2006.3",
            "tags": [
              "vendor-advisory",
              "x_refsource_SCO",
              "x_transferred"
            ],
            "url": "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.3/SCOSA-2006.3.txt"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://bugs.gentoo.org/show_bug.cgi?id=91584"
          },
          {
            "name": "SCOSA-2005.34",
            "tags": [
              "vendor-advisory",
              "x_refsource_SCO",
              "x_transferred"
            ],
            "url": "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.34/SCOSA-2005.34.txt"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-05-10T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-10T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-755",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2005/dsa-755"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://bugzilla.remotesensing.org/show_bug.cgi?id=843"
        },
        {
          "name": "18289",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18289"
        },
        {
          "name": "16872",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/16872"
        },
        {
          "name": "15320",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/15320"
        },
        {
          "name": "libtiff-bitspersample-bo(20533)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20533"
        },
        {
          "name": "18943",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18943"
        },
        {
          "name": "16350",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/16350"
        },
        {
          "name": "1013944",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1013944"
        },
        {
          "name": "GLSA-200505-07",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200505-07.xml"
        },
        {
          "name": "MDKSA-2006:042",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:042"
        },
        {
          "name": "USN-130-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-130-1"
        },
        {
          "name": "13585",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/13585"
        },
        {
          "name": "SCOSA-2006.3",
          "tags": [
            "vendor-advisory",
            "x_refsource_SCO"
          ],
          "url": "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.3/SCOSA-2006.3.txt"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://bugs.gentoo.org/show_bug.cgi?id=91584"
        },
        {
          "name": "SCOSA-2005.34",
          "tags": [
            "vendor-advisory",
            "x_refsource_SCO"
          ],
          "url": "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.34/SCOSA-2005.34.txt"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-1544",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-755",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2005/dsa-755"
            },
            {
              "name": "http://bugzilla.remotesensing.org/show_bug.cgi?id=843",
              "refsource": "MISC",
              "url": "http://bugzilla.remotesensing.org/show_bug.cgi?id=843"
            },
            {
              "name": "18289",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18289"
            },
            {
              "name": "16872",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/16872"
            },
            {
              "name": "15320",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/15320"
            },
            {
              "name": "libtiff-bitspersample-bo(20533)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20533"
            },
            {
              "name": "18943",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18943"
            },
            {
              "name": "16350",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/16350"
            },
            {
              "name": "1013944",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1013944"
            },
            {
              "name": "GLSA-200505-07",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200505-07.xml"
            },
            {
              "name": "MDKSA-2006:042",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:042"
            },
            {
              "name": "USN-130-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-130-1"
            },
            {
              "name": "13585",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/13585"
            },
            {
              "name": "SCOSA-2006.3",
              "refsource": "SCO",
              "url": "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.3/SCOSA-2006.3.txt"
            },
            {
              "name": "http://bugs.gentoo.org/show_bug.cgi?id=91584",
              "refsource": "MISC",
              "url": "http://bugs.gentoo.org/show_bug.cgi?id=91584"
            },
            {
              "name": "SCOSA-2005.34",
              "refsource": "SCO",
              "url": "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.34/SCOSA-2005.34.txt"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-1544",
    "datePublished": "2005-05-14T04:00:00.000Z",
    "dateReserved": "2005-05-14T00:00:00.000Z",
    "dateUpdated": "2024-08-07T21:51:50.277Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2005-1544",
      "date": "2026-10-27",
      "epss": "0.14394",
      "percentile": "0.96601"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:libtiff:libtiff:3.4:*:*:*:*:*:*:*",
                  "matchCriteriaId": "CCA5EEB8-9D2C-49A9-BB08-CE5017B79D81",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:libtiff:libtiff:3.5.1:*:*:*:*:*:*:*",
                  "matchCriteriaId": "261FAE51-5207-4136-9FFE-2330A281266C",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:libtiff:libtiff:3.5.2:*:*:*:*:*:*:*",
                  "matchCriteriaId": "B32C83B9-F7DA-450A-A687-9A73734CD712",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:libtiff:libtiff:3.5.3:*:*:*:*:*:*:*",
                  "matchCriteriaId": "9485283A-B73E-4567-914A-42A86F5FFCB4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:libtiff:libtiff:3.5.4:*:*:*:*:*:*:*",
                  "matchCriteriaId": "95892168-0FB6-4E3F-9303-2F9B3CF60D2B",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:libtiff:libtiff:3.5.5:*:*:*:*:*:*:*",
                  "matchCriteriaId": "A5021564-5E0A-4DDC-BC68-200B6050043E",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:libtiff:libtiff:3.5.6:*:*:*:*:*:*:*",
                  "matchCriteriaId": "11C50750-FE1D-42BA-9125-7D8E872AA2DB",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:libtiff:libtiff:3.5.7:*:*:*:*:*:*:*",
                  "matchCriteriaId": "19AA66E5-FDDD-4243-B945-DFEBDD25F258",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:libtiff:libtiff:3.6.0:*:*:*:*:*:*:*",
                  "matchCriteriaId": "62F359CD-5DC4-4919-B8E1-95BDDBD27EFC",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:libtiff:libtiff:3.6.1:*:*:*:*:*:*:*",
                  "matchCriteriaId": "D2C8C550-3313-4266-B4B3-E9E9047CFE04",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:libtiff:libtiff:3.7.0:*:*:*:*:*:*:*",
                  "matchCriteriaId": "ABEEBA7B-81D5-4148-912B-9AD448BBE741",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:libtiff:libtiff:3.7.1:*:*:*:*:*:*:*",
                  "matchCriteriaId": "448555FE-8E91-4EA7-BA05-6915F5508319",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag."
        }
      ],
      "id": "CVE-2005-1544",
      "lastModified": "2024-11-20T23:57:34.383",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": false,
            "baseSeverity": "HIGH",
            "cvssData": {
              "accessComplexity": "LOW",
              "accessVector": "NETWORK",
              "authentication": "NONE",
              "availabilityImpact": "PARTIAL",
              "baseScore": 7.5,
              "confidentialityImpact": "PARTIAL",
              "integrityImpact": "PARTIAL",
              "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
              "version": "2.0"
            },
            "exploitabilityScore": 10.0,
            "impactScore": 6.4,
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": true,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": false
          }
        ]
      },
      "published": "2005-05-14T04:00:00.000",
      "references": [
        {
          "source": "cve@mitre.org",
          "url": "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.3/SCOSA-2006.3.txt"
        },
        {
          "source": "cve@mitre.org",
          "url": "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.34/SCOSA-2005.34.txt"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Patch"
          ],
          "url": "http://bugs.gentoo.org/show_bug.cgi?id=91584"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://bugzilla.remotesensing.org/show_bug.cgi?id=843"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://secunia.com/advisories/15320"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://secunia.com/advisories/16872"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://secunia.com/advisories/18289"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://secunia.com/advisories/18943"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://securitytracker.com/id?1013944"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.debian.org/security/2005/dsa-755"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200505-07.xml"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:042"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.osvdb.org/16350"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.securityfocus.com/bid/13585"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.ubuntu.com/usn/usn-130-1"
        },
        {
          "source": "cve@mitre.org",
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20533"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.3/SCOSA-2006.3.txt"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.34/SCOSA-2005.34.txt"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Patch"
          ],
          "url": "http://bugs.gentoo.org/show_bug.cgi?id=91584"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://bugzilla.remotesensing.org/show_bug.cgi?id=843"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/15320"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/16872"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/18289"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/18943"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://securitytracker.com/id?1013944"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.debian.org/security/2005/dsa-755"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200505-07.xml"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:042"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.osvdb.org/16350"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.securityfocus.com/bid/13585"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.ubuntu.com/usn/usn-130-1"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20533"
        }
      ],
      "sourceIdentifier": "cve@mitre.org",
      "vendorComments": [
        {
          "comment": "Not vulnerable. This issue did not affect the versions of libtiff as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.\n",
          "lastModified": "2006-08-30T00:00:00",
          "organization": "Red Hat"
        }
      ],
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "NVD-CWE-Other"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:libtiff:libtiff:3.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CCA5EEB8-9D2C-49A9-BB08-CE5017B79D81",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:libtiff:libtiff:3.5.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "261FAE51-5207-4136-9FFE-2330A281266C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:libtiff:libtiff:3.5.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B32C83B9-F7DA-450A-A687-9A73734CD712",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:libtiff:libtiff:3.5.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9485283A-B73E-4567-914A-42A86F5FFCB4",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:libtiff:libtiff:3.5.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "95892168-0FB6-4E3F-9303-2F9B3CF60D2B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:libtiff:libtiff:3.5.5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A5021564-5E0A-4DDC-BC68-200B6050043E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:libtiff:libtiff:3.5.6:*:*:*:*:*:*:*",
                    "matchCriteriaId": "11C50750-FE1D-42BA-9125-7D8E872AA2DB",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:libtiff:libtiff:3.5.7:*:*:*:*:*:*:*",
                    "matchCriteriaId": "19AA66E5-FDDD-4243-B945-DFEBDD25F258",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:libtiff:libtiff:3.6.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "62F359CD-5DC4-4919-B8E1-95BDDBD27EFC",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:libtiff:libtiff:3.6.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D2C8C550-3313-4266-B4B3-E9E9047CFE04",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:libtiff:libtiff:3.7.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "ABEEBA7B-81D5-4148-912B-9AD448BBE741",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:libtiff:libtiff:3.7.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "448555FE-8E91-4EA7-BA05-6915F5508319",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag."
          }
        ],
        "id": "CVE-2005-1544",
        "lastModified": "2026-04-16T00:27:16.627",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "HIGH",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 7.5,
                "confidentialityImpact": "PARTIAL",
                "integrityImpact": "PARTIAL",
                "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 10.0,
              "impactScore": 6.4,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": true,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2005-05-14T04:00:00.000",
        "references": [
          {
            "source": "cve@mitre.org",
            "url": "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.3/SCOSA-2006.3.txt"
          },
          {
            "source": "cve@mitre.org",
            "url": "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.34/SCOSA-2005.34.txt"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Patch"
            ],
            "url": "http://bugs.gentoo.org/show_bug.cgi?id=91584"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://bugzilla.remotesensing.org/show_bug.cgi?id=843"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/15320"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/16872"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/18289"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/18943"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://securitytracker.com/id?1013944"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.debian.org/security/2005/dsa-755"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200505-07.xml"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:042"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.osvdb.org/16350"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/bid/13585"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.ubuntu.com/usn/usn-130-1"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20533"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.3/SCOSA-2006.3.txt"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.34/SCOSA-2005.34.txt"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "http://bugs.gentoo.org/show_bug.cgi?id=91584"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://bugzilla.remotesensing.org/show_bug.cgi?id=843"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/15320"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/16872"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/18289"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/18943"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://securitytracker.com/id?1013944"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.debian.org/security/2005/dsa-755"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200505-07.xml"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:042"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.osvdb.org/16350"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/13585"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.ubuntu.com/usn/usn-130-1"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20533"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vendorComments": [
          {
            "comment": "Not vulnerable. This issue did not affect the versions of libtiff as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.\n",
            "lastModified": "2006-08-30T00:00:00",
            "organization": "Red Hat"
          }
        ],
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-Other"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-04-17T12:30:38Z",
      "cve": "CVE-2005-1544",
      "id": "CVE-2005-1544",
      "initial_release_date": "2023-02-15T06:18:17Z",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2005-1544",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2005-1544.json",
      "version": "3"
    }
  }
}

BDU:2015-09475 (CVE-2005-1544)

Vulnerability from fstec – Published: 2015-04-28 – Updated: 2021-03-23 – View on bdu.fstec.ru Fixed

Title

Уязвимость операционной системы Gentoo Linux, позволяющая удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

Summary

Уязвимость пакета tiff (до версии 3.7.2) операционной системы Gentoo Linux, эксплуатация которой может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимости может быть осуществлена удаленно

Severity

7.5 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:P/I:P/A:P

Status

Confirmed by the vendor

Exploitation

Being clarified

Incidents

Being clarified

Remediation

Being clarified

Aliases

CVE-2005-1544, GLSA-200505-07

References

1 reference

URL
http://security.gentoo.org/glsa/glsa-200505-07.xml

Impacted products

1 product from 1 vendor

Vendors

Gentoo Foundation Inc.

Products

Gentoo Linux

Versions

до 2005.1 (Gentoo Linux)

Product types

Operating system

Mitigations

Обновление пакета tiff до версии 3.7.2 или выше

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Gentoo Foundation Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 2005.1 (Gentoo Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0430\u043a\u0435\u0442\u0430 tiff \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.7.2 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "10.05.2005",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "23.03.2021",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "28.04.2015",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-09475",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2005-1544, GLSA-200505-07",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Gentoo Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Gentoo Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": null,
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0430\u043a\u0435\u0442\u0430 tiff (\u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.7.2) \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Gentoo Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://security.gentoo.org/glsa/glsa-200505-07.xml",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": null,
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

FKIE_CVE-2005-1544

Vulnerability from fkie_nvd - Published: 2005-05-14 04:00 - Updated: 2026-06-16 22:13

Severity

Summary

Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag.

References

URL	Tags
cve@mitre.org	ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.3/SCOSA-2006.3.txt
cve@mitre.org	ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.34/SCOSA-2005.34.txt
cve@mitre.org	http://bugs.gentoo.org/show_bug.cgi?id=91584	Patch
cve@mitre.org	http://bugzilla.remotesensing.org/show_bug.cgi?id=843
cve@mitre.org	http://secunia.com/advisories/15320
cve@mitre.org	http://secunia.com/advisories/16872
cve@mitre.org	http://secunia.com/advisories/18289
cve@mitre.org	http://secunia.com/advisories/18943
cve@mitre.org	http://securitytracker.com/id?1013944
cve@mitre.org	http://www.debian.org/security/2005/dsa-755
cve@mitre.org	http://www.gentoo.org/security/en/glsa/glsa-200505-07.xml
cve@mitre.org	http://www.mandriva.com/security/advisories?name=MDKSA-2006:042
cve@mitre.org	http://www.osvdb.org/16350
cve@mitre.org	http://www.securityfocus.com/bid/13585
cve@mitre.org	http://www.ubuntu.com/usn/usn-130-1
cve@mitre.org	https://exchange.xforce.ibmcloud.com/vulnerabilities/20533
af854a3a-2127-422b-91ae-364da2661108	ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.3/SCOSA-2006.3.txt
af854a3a-2127-422b-91ae-364da2661108	ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.34/SCOSA-2005.34.txt
af854a3a-2127-422b-91ae-364da2661108	http://bugs.gentoo.org/show_bug.cgi?id=91584	Patch
af854a3a-2127-422b-91ae-364da2661108	http://bugzilla.remotesensing.org/show_bug.cgi?id=843
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/15320
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/16872
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/18289
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/18943
af854a3a-2127-422b-91ae-364da2661108	http://securitytracker.com/id?1013944
af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2005/dsa-755
af854a3a-2127-422b-91ae-364da2661108	http://www.gentoo.org/security/en/glsa/glsa-200505-07.xml
af854a3a-2127-422b-91ae-364da2661108	http://www.mandriva.com/security/advisories?name=MDKSA-2006:042
af854a3a-2127-422b-91ae-364da2661108	http://www.osvdb.org/16350
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/13585
af854a3a-2127-422b-91ae-364da2661108	http://www.ubuntu.com/usn/usn-130-1
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/20533

Impacted products

Vendor	Product	Version
libtiff	libtiff	3.4
libtiff	libtiff	3.5.1
libtiff	libtiff	3.5.2
libtiff	libtiff	3.5.3
libtiff	libtiff	3.5.4
libtiff	libtiff	3.5.5
libtiff	libtiff	3.5.6
libtiff	libtiff	3.5.7
libtiff	libtiff	3.6.0
libtiff	libtiff	3.6.1
libtiff	libtiff	3.7.0
libtiff	libtiff	3.7.1

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:libtiff:libtiff:3.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "CCA5EEB8-9D2C-49A9-BB08-CE5017B79D81",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:libtiff:libtiff:3.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "261FAE51-5207-4136-9FFE-2330A281266C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:libtiff:libtiff:3.5.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "B32C83B9-F7DA-450A-A687-9A73734CD712",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:libtiff:libtiff:3.5.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "9485283A-B73E-4567-914A-42A86F5FFCB4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:libtiff:libtiff:3.5.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "95892168-0FB6-4E3F-9303-2F9B3CF60D2B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:libtiff:libtiff:3.5.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "A5021564-5E0A-4DDC-BC68-200B6050043E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:libtiff:libtiff:3.5.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "11C50750-FE1D-42BA-9125-7D8E872AA2DB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:libtiff:libtiff:3.5.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "19AA66E5-FDDD-4243-B945-DFEBDD25F258",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:libtiff:libtiff:3.6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "62F359CD-5DC4-4919-B8E1-95BDDBD27EFC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:libtiff:libtiff:3.6.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "D2C8C550-3313-4266-B4B3-E9E9047CFE04",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:libtiff:libtiff:3.7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "ABEEBA7B-81D5-4148-912B-9AD448BBE741",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:libtiff:libtiff:3.7.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "448555FE-8E91-4EA7-BA05-6915F5508319",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag."
    }
  ],
  "id": "CVE-2005-1544",
  "lastModified": "2026-06-16T22:13:13.580",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": true,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2005-05-14T04:00:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.3/SCOSA-2006.3.txt"
    },
    {
      "source": "cve@mitre.org",
      "url": "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.34/SCOSA-2005.34.txt"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://bugs.gentoo.org/show_bug.cgi?id=91584"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://bugzilla.remotesensing.org/show_bug.cgi?id=843"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/15320"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/16872"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/18289"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/18943"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securitytracker.com/id?1013944"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.debian.org/security/2005/dsa-755"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200505-07.xml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:042"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/16350"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/13585"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.ubuntu.com/usn/usn-130-1"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20533"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.3/SCOSA-2006.3.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.34/SCOSA-2005.34.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://bugs.gentoo.org/show_bug.cgi?id=91584"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://bugzilla.remotesensing.org/show_bug.cgi?id=843"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/15320"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/16872"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/18289"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/18943"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1013944"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2005/dsa-755"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200505-07.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:042"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/16350"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/13585"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/usn-130-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20533"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vendorComments": [
    {
      "comment": "Not vulnerable. This issue did not affect the versions of libtiff as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.\n",
      "lastModified": "2006-08-30T00:00:00",
      "organization": "Red Hat"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-45PX-6F9W-FMPF

Vulnerability from github – Published: 2022-05-03 03:14 – Updated: 2022-05-03 03:14

Details

Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2005-1544"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2005-05-14T04:00:00Z",
    "severity": "HIGH"
  },
  "details": "Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag.",
  "id": "GHSA-45px-6f9w-fmpf",
  "modified": "2022-05-03T03:14:11Z",
  "published": "2022-05-03T03:14:11Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2005-1544"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20533"
    },
    {
      "type": "WEB",
      "url": "http://bugs.gentoo.org/show_bug.cgi?id=91584"
    },
    {
      "type": "WEB",
      "url": "http://bugzilla.remotesensing.org/show_bug.cgi?id=843"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/15320"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/16872"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/18289"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/18943"
    },
    {
      "type": "WEB",
      "url": "http://securitytracker.com/id?1013944"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2005/dsa-755"
    },
    {
      "type": "WEB",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200505-07.xml"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:042"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/16350"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/13585"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/usn-130-1"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2005-1544

Vulnerability from gsd - Updated: 2023-12-13 01:20

Details

Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag.

Aliases

CVE-2005-1544

Aliases

CVE-2005-1544

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2005-1544",
    "description": "Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag.",
    "id": "GSD-2005-1544",
    "references": [
      "https://www.suse.com/security/cve/CVE-2005-1544.html",
      "https://www.debian.org/security/2005/dsa-755"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2005-1544"
      ],
      "details": "Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag.",
      "id": "GSD-2005-1544",
      "modified": "2023-12-13T01:20:11.936440Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2005-1544",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "DSA-755",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2005/dsa-755"
          },
          {
            "name": "http://bugzilla.remotesensing.org/show_bug.cgi?id=843",
            "refsource": "MISC",
            "url": "http://bugzilla.remotesensing.org/show_bug.cgi?id=843"
          },
          {
            "name": "18289",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/18289"
          },
          {
            "name": "16872",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/16872"
          },
          {
            "name": "15320",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/15320"
          },
          {
            "name": "libtiff-bitspersample-bo(20533)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20533"
          },
          {
            "name": "18943",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/18943"
          },
          {
            "name": "16350",
            "refsource": "OSVDB",
            "url": "http://www.osvdb.org/16350"
          },
          {
            "name": "1013944",
            "refsource": "SECTRACK",
            "url": "http://securitytracker.com/id?1013944"
          },
          {
            "name": "GLSA-200505-07",
            "refsource": "GENTOO",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200505-07.xml"
          },
          {
            "name": "MDKSA-2006:042",
            "refsource": "MANDRIVA",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:042"
          },
          {
            "name": "USN-130-1",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/usn-130-1"
          },
          {
            "name": "13585",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/13585"
          },
          {
            "name": "SCOSA-2006.3",
            "refsource": "SCO",
            "url": "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.3/SCOSA-2006.3.txt"
          },
          {
            "name": "http://bugs.gentoo.org/show_bug.cgi?id=91584",
            "refsource": "MISC",
            "url": "http://bugs.gentoo.org/show_bug.cgi?id=91584"
          },
          {
            "name": "SCOSA-2005.34",
            "refsource": "SCO",
            "url": "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.34/SCOSA-2005.34.txt"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:libtiff:libtiff:3.5.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:libtiff:libtiff:3.5.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:libtiff:libtiff:3.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:libtiff:libtiff:3.5.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:libtiff:libtiff:3.6.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:libtiff:libtiff:3.6.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:libtiff:libtiff:3.5.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:libtiff:libtiff:3.5.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:libtiff:libtiff:3.7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:libtiff:libtiff:3.7.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:libtiff:libtiff:3.5.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:libtiff:libtiff:3.5.7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-1544"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-Other"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://bugzilla.remotesensing.org/show_bug.cgi?id=843",
              "refsource": "MISC",
              "tags": [],
              "url": "http://bugzilla.remotesensing.org/show_bug.cgi?id=843"
            },
            {
              "name": "GLSA-200505-07",
              "refsource": "GENTOO",
              "tags": [],
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200505-07.xml"
            },
            {
              "name": "http://bugs.gentoo.org/show_bug.cgi?id=91584",
              "refsource": "MISC",
              "tags": [
                "Patch"
              ],
              "url": "http://bugs.gentoo.org/show_bug.cgi?id=91584"
            },
            {
              "name": "15320",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/15320"
            },
            {
              "name": "SCOSA-2005.34",
              "refsource": "SCO",
              "tags": [],
              "url": "ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.34/SCOSA-2005.34.txt"
            },
            {
              "name": "16872",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/16872"
            },
            {
              "name": "18943",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/18943"
            },
            {
              "name": "DSA-755",
              "refsource": "DEBIAN",
              "tags": [],
              "url": "http://www.debian.org/security/2005/dsa-755"
            },
            {
              "name": "USN-130-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "http://www.ubuntu.com/usn/usn-130-1"
            },
            {
              "name": "13585",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/13585"
            },
            {
              "name": "16350",
              "refsource": "OSVDB",
              "tags": [],
              "url": "http://www.osvdb.org/16350"
            },
            {
              "name": "1013944",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://securitytracker.com/id?1013944"
            },
            {
              "name": "SCOSA-2006.3",
              "refsource": "SCO",
              "tags": [],
              "url": "ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.3/SCOSA-2006.3.txt"
            },
            {
              "name": "18289",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/18289"
            },
            {
              "name": "MDKSA-2006:042",
              "refsource": "MANDRIVA",
              "tags": [],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:042"
            },
            {
              "name": "libtiff-bitspersample-bo(20533)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20533"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": true,
          "severity": "HIGH",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2017-07-11T01:32Z",
      "publishedDate": "2005-05-14T04:00Z"
    }
  }
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2005-1544 (GCVE-0-2005-1544)

BDU:2015-09475 (CVE-2005-1544)

FKIE_CVE-2005-1544

GHSA-45PX-6F9W-FMPF

GSD-2005-1544

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour