CVE-2009-5022

Libtiff < 3.9.4 - Memory Corruption

Title source: rule
STIX 2.1

Description

Heap-based buffer overflow in tif_ojpeg.c in the OJPEG decoder in LibTIFF before 3.9.5 allows remote attackers to execute arbitrary code via a crafted TIFF file.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Francis Provencher · textdoswindows
https://www.exploit-db.com/exploits/22681

References (17)

Core 17
Core References
Exploit mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2011/04/12/10
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2011/dsa-2256
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/66774
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/44271
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1025380
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2011:078
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-201209-02.xml
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058478.html
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/1014
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/1082
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/47338
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1120-1
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2011-0452.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/50726

Scores

EPSS 0.1656
EPSS Percentile 94.9%

Details

CWE
CWE-119
Status published
Products (25)
libtiff/libtiff 3.4 (11 CPE variants)
libtiff/libtiff 3.5.1
libtiff/libtiff 3.5.2
libtiff/libtiff 3.5.3
libtiff/libtiff 3.5.4
libtiff/libtiff 3.5.5
libtiff/libtiff 3.5.6 (2 CPE variants)
libtiff/libtiff 3.5.7 (6 CPE variants)
libtiff/libtiff 3.6.0 (3 CPE variants)
libtiff/libtiff 3.6.1
... and 15 more
Published May 03, 2011
Tracked Since Feb 18, 2026