CVE-2009-2347

libtiff 3.8-3.8.2, 3.9, 4.0 - Remote Code Execution via Large TIFF Image Dimensions

Title source: llm
STIX 2.1

Description

Multiple integer overflows in inter-color spaces conversion tools in libtiff 3.8 through 3.8.2, 3.9, and 4.0 allow context-dependent attackers to execute arbitrary code via a TIFF image with large (1) width and (2) height values, which triggers a heap-based buffer overflow in the (a) cvt_whole_image function in tiff2rgba and (b) tiffcvt function in rgb2ycbcr.

References (29)

Core 29
Core References
Vendor Advisory vendor-advisory x_refsource_fedora
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00663.html
Vendor Advisory vendor-advisory x_refsource_fedora
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00724.html
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10988
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/51688
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35817
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35866
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/55821
Patch, Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2009/1870
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1022539
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0621
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-801-1
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35811
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35883
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-201209-02.xml
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/36194
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/504892/100/0/threaded
Patch vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2009:150
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200908-03.xml
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35911
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/55822
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2009-1159.html
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/35652
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2009/dsa-1835
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2011:043
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/50726

Scores

EPSS 0.0106
EPSS Percentile 77.9%

Details

CWE
CWE-189
Status published
Products (5)
libtiff/libtiff 3.8.0
libtiff/libtiff 3.8.1
libtiff/libtiff 3.8.2
libtiff/libtiff 3.9
libtiff/libtiff 4.0
Published Jul 14, 2009
Tracked Since Feb 18, 2026