Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2009-2347
HistoryJul 14, 2009 - 8:30 p.m.

CVE-2009-2347

2009-07-1420:30:00
CWE-189
[email protected]
web.nvd.nist.gov
51
cve-2009-2347
integer overflows
libtiff
arbitrary code execution
tiff image
vulnerability
nvd

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.006 Low

EPSS

Percentile

78.1%

JSON

Multiple integer overflows in inter-color spaces conversion tools in libtiff 3.8 through 3.8.2, 3.9, and 4.0 allow context-dependent attackers to execute arbitrary code via a TIFF image with large (1) width and (2) height values, which triggers a heap-based buffer overflow in the (a) cvt_whole_image function in tiff2rgba and (b) tiffcvt function in rgb2ycbcr.

References

Related

nessus 29
openvas 47
altlinux 2
ubuntucve 1
prion 1
freebsd 1
ubuntu 1
securityvulns 2
debiancve 1
seebug 1
veracode 1
gentoo 2
oraclelinux 1
osv 1
redhat 1
centos 1
debian 1
fedora 2
nessus
nessus
SuSE 10 Security Update : libtiff (ZYPP Patch Number 6407)
2009-09-24 00:00:00
FreeBSD : tiff -- Multiple integer overflows (8816bf3a-7929-11df-bcce-0018f3e2eb82)
2010-06-17 00:00:00
SuSE9 Security Update : libtiff (YOU Patch Number 12470)
2009-09-24 00:00:00
openvas
openvas
SLES10: Security update for libtiff
2009-10-13 00:00:00
FreeBSD Ports: tiff
2010-07-06 00:00:00
FreeBSD Ports: tiff
2010-07-06 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 5 package libtiff version 3.8.2-alt5
2009-07-15 00:00:00
Security fix for the ALT Linux 10 package libtiff version 3.8.2-alt5
2009-07-15 00:00:00
ubuntucve
ubuntucve
CVE-2009-2347
2009-07-14 00:00:00
prion
prion
Integer overflow
2009-07-14 20:30:00
freebsd
freebsd
tiff -- Multiple integer overflows
2009-05-22 00:00:00
ubuntu
ubuntu
tiff vulnerability
2009-07-13 00:00:00
securityvulns
securityvulns
[oCERT-2009-012] libtiff tools integer overflows
2009-07-14 00:00:00
libtiff multiple security vulnerabilities
2009-07-14 00:00:00
debiancve
debiancve
CVE-2009-2347
2009-07-14 20:30:00
seebug
seebug
LibTIFF库tiff2rgba和rgb2ycbcr转换工具整数溢出漏洞
2009-07-14 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:36:26
gentoo
gentoo
libTIFF: User-assisted execution of arbitrary code
2009-08-07 00:00:00
libTIFF: Multiple vulnerabilities
2012-09-23 00:00:00
oraclelinux
oraclelinux
libtiff security update
2009-07-16 00:00:00
osv
osv
tiff - several vulnerabilities
2009-07-15 00:00:00
redhat
redhat
(RHSA-2009:1159) Moderate: libtiff security update
2009-07-16 00:00:00
centos
centos
libtiff security update
2009-07-22 22:35:54
debian
debian
[SECURITY] [DSA 1835-1] New tiff packages fix several vulnerabilities
2009-07-15 19:20:19
fedora
fedora
[SECURITY] Fedora 10 Update: libtiff-3.8.2-14.fc10
2009-07-19 10:12:56
[SECURITY] Fedora 11 Update: libtiff-3.8.2-14.fc11
2009-07-19 10:30:18

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.006 Low

EPSS

Percentile

78.1%

JSON
Related for CVE-2009-2347
nessus29openvas47altlinux2ubuntucve1prion1freebsd1ubuntu1securityvulns2debiancve1seebug1veracode1gentoo2oraclelinux1osv1redhat1centos1debian1fedora2