Vulnerability in Libtiff
CVE-2009-2347
Multiple integer overflows in inter-color spaces conversion tools in libtiff 3.8 through 3.8.2, 3.9, and 4.0 allow context-dependent attackers to execute arbitrary code via a TIFF image with large (1) width and (2) height values, which triggers a heap-based buffer overflow in the (a) cvt_whole_image function in tiff2rgba and (b) tiffcvt function in rgb2ycbcr.
EPSS: 0.042 (89.8th percentile) — read the EPSS interpretation.
Affected products
- Libtiff — versions 3.8.0, 3.8.1, 3.8.2
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_FEDORA)
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (vendor-advisory, x_refsource_FEDORA)
- cve@mitre.org (Patch, vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- cve@mitre.org (Patch, x_refsource_MISC)
- cve@mitre.org (signature, x_refsource_OVAL, vdb-entry)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)