NVD

Id
49595  
Name
CVE-2009-2347  
Description
Multiple integer overflows in inter-color spaces conversion tools in libtiff 3.8 through 3.8.2, 3.9, and 4.0 allow context-dependent attackers to execute arbitrary code via a TIFF image with large (1) width and (2) height values, which triggers a heap-based buffer overflow in the (a) cvt_whole_image function in tiff2rgba and (b) tiffcvt function in rgb2ycbcr.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-07-14  
Modified Date
2013-05-14  
Seq
2009-2347  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
250657 49595 CVE-2009-2347 http://article.gmane.org/gmane.linux.debian.devel.changes.unstable/178563/  View
250658 49595 CVE-2009-2347 http://bugzilla.maptools.org/show_bug.cgi?id=2079  View
250659 49595 CVE-2009-2347 oval:org.mitre.oval:def:10988  View
250660 49595 CVE-2009-2347 GLSA-200908-03  View
250661 49595 CVE-2009-2347 GLSA-201209-02  View
250662 49595 CVE-2009-2347 DSA-1835  View
250663 49595 CVE-2009-2347 MDVSA-2009:150  View
250664 49595 CVE-2009-2347 MDVSA-2011:043  View
250665 49595 CVE-2009-2347 http://www.ocert.org/advisories/ocert-2009-012.html  View
250666 49595 CVE-2009-2347 RHSA-2009:1159  View
250667 49595 CVE-2009-2347 20090713 [oCERT-2009-012] libtiff tools integer overflows  View
250668 49595 CVE-2009-2347 35652  View
250669 49595 CVE-2009-2347 1022539  View
250670 49595 CVE-2009-2347 USN-801-1  View
250671 49595 CVE-2009-2347 ADV-2009-1870  View
250672 49595 CVE-2009-2347 ADV-2011-0621  View
250673 49595 CVE-2009-2347 libtiff-rgb2ycbcr-tiff2rgba-bo(51688)  View
250674 49595 CVE-2009-2347 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2347  View
250675 49595 CVE-2009-2347 FEDORA-2009-7724  View
250676 49595 CVE-2009-2347 FEDORA-2009-7775  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40920 JVNDB-2009-001926 libtiff の inter-color spaces conversion ツールにおける整数オーバーフローの脆弱性 libtiff の inter-color spaces conversion ツールには、過剰な幅と高さの値を持つ TIFF イメージの処理に不備があるため、整数オーバーフローの脆弱性が存在します。 CVE-2009-2347 39778 CVE-2009-2347 49595 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001926.html 2009-07-14 2009-08-25 View