CVE-2009-2347

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-07-14 · updated 2026-06-16
Weakness: CWE-189

Description

Multiple integer overflows in inter-color spaces conversion tools in libtiff 3.8 through 3.8.2, 3.9, and 4.0 allow context-dependent attackers to execute arbitrary code via a TIFF image with large (1) width and (2) height values, which triggers a heap-based buffer overflow in the (a) cvt_whole_image function in tiff2rgba and (b) tiffcvt function in rgb2ycbcr.

Affected products

libtiff: 3.8.0, 3.8.1, 3.8.2, 3.9, 4.0

References

http://article.gmane.org/gmane.linux.debian.devel.changes.unstable/178563/
http://bugzilla.maptools.org/show_bug.cgi?id=2079
http://osvdb.org/55821
http://osvdb.org/55822
http://secunia.com/advisories/35811
http://secunia.com/advisories/35817
http://secunia.com/advisories/35866
http://secunia.com/advisories/35883
http://secunia.com/advisories/35911
http://secunia.com/advisories/36194
http://secunia.com/advisories/50726
http://security.gentoo.org/glsa/glsa-200908-03.xml

Get alerted when CVE-2009-2347 or the next vulnerability affects your stack