CVE-2009-2347

high
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

Multiple integer overflows in inter-color spaces conversion tools in libtiff 3.8 through 3.8.2, 3.9, and 4.0 allow context-dependent attackers to execute arbitrary code via a TIFF image with large (1) width and (2) height values, which triggers a heap-based buffer overflow in the (a) cvt_whole_image function in tiff2rgba and (b) tiffcvt function in rgb2ycbcr.

References

http://article.gmane.org/gmane.linux.debian.devel.changes.unstable/178563/

http://bugzilla.maptools.org/show_bug.cgi?id=2079

http://osvdb.org/55821

http://osvdb.org/55822

http://secunia.com/advisories/35811

http://secunia.com/advisories/35817

http://secunia.com/advisories/35866

http://secunia.com/advisories/35883

http://secunia.com/advisories/35911

http://secunia.com/advisories/36194

http://secunia.com/advisories/50726

http://security.gentoo.org/glsa/glsa-200908-03.xml

http://security.gentoo.org/glsa/glsa-201209-02.xml

http://www.debian.org/security/2009/dsa-1835

http://www.mandriva.com/security/advisories?name=MDVSA-2009:150

http://www.mandriva.com/security/advisories?name=MDVSA-2011:043

http://www.ocert.org/advisories/ocert-2009-012.html

http://www.redhat.com/support/errata/RHSA-2009-1159.html

http://www.securityfocus.com/archive/1/504892/100/0/threaded

http://www.securityfocus.com/bid/35652

http://www.securitytracker.com/id?1022539

http://www.ubuntu.com/usn/USN-801-1

http://www.vupen.com/english/advisories/2009/1870

http://www.vupen.com/english/advisories/2011/0621

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2347

https://exchange.xforce.ibmcloud.com/vulnerabilities/51688

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10988

https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00663.html

https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00724.html

Details

Source: MITRE

Published: 2009-07-14

Updated: 2018-10-10

Type: CWE-189

Risk Information

CVSS v2

Base Score: 9.3

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Impact Score: 10

Exploitability Score: 8.6

Severity: HIGH

Tenable Plugins

View all (29 total)

IDNameProductFamilySeverity
107853Solaris 10 (x86) : 119901-17NessusSolaris Local Security Checks
high
107852Solaris 10 (x86) : 119901-16NessusSolaris Local Security Checks
high
107851Solaris 10 (x86) : 119901-15NessusSolaris Local Security Checks
high
107350Solaris 10 (sparc) : 119900-18NessusSolaris Local Security Checks
high
107349Solaris 10 (sparc) : 119900-17NessusSolaris Local Security Checks
high
107348Solaris 10 (sparc) : 119900-16NessusSolaris Local Security Checks
high
79467OracleVM 2.1 : libtiff (OVMSA-2009-0027)NessusOracleVM Local Security Checks
high
67892Oracle Linux 3 / 4 / 5 : libtiff (ELSA-2009-1159)NessusOracle Linux Local Security Checks
high
62235GLSA-201209-02 : libTIFF: Multiple vulnerabilitiesNessusGentoo Local Security Checks
high
60623Scientific Linux Security Update : libtiff for SL3.0.x, SL 4.x, SL 5.x on i386/x86_64NessusScientific Linux Local Security Checks
high
52592Mandriva Linux Security Advisory : libtiff (MDVSA-2011:043)NessusMandriva Local Security Checks
high
47033FreeBSD : tiff -- Multiple integer overflows (8816bf3a-7929-11df-bcce-0018f3e2eb82)NessusFreeBSD Local Security Checks
high
44700Debian DSA-1835-1 : tiff - several vulnerabilitiesNessusDebian Local Security Checks
high
42991Mandriva Linux Security Advisory : libtiff (MDVSA-2009:169-1)NessusMandriva Local Security Checks
high
42018openSUSE 10 Security Update : libtiff-devel (libtiff-devel-6406)NessusSuSE Local Security Checks
high
41553SuSE 10 Security Update : libtiff (ZYPP Patch Number 6407)NessusSuSE Local Security Checks
high
41430SuSE 11 Security Update : libtiff (SAT Patch Number 1172)NessusSuSE Local Security Checks
high
41320SuSE9 Security Update : libtiff (YOU Patch Number 12470)NessusSuSE Local Security Checks
high
40653openSUSE Security Update : libtiff-devel (libtiff-devel-1176)NessusSuSE Local Security Checks
high
40646openSUSE Security Update : libtiff-devel (libtiff-devel-1176)NessusSuSE Local Security Checks
high
40519GLSA-200908-03 : libTIFF: User-assisted execution of arbitrary codeNessusGentoo Local Security Checks
high
40344CentOS 3 / 5 : libtiff (CESA-2009:1159)NessusCentOS Local Security Checks
high
39864Fedora 11 : libtiff-3.8.2-14.fc11 (2009-7775)NessusFedora Local Security Checks
high
39858Fedora 10 : libtiff-3.8.2-14.fc10 (2009-7724)NessusFedora Local Security Checks
high
39850RHEL 3 / 4 / 5 : libtiff (RHSA-2009:1159)NessusRed Hat Local Security Checks
high
39849Mandriva Linux Security Advisory : libtiff (MDVSA-2009:150)NessusMandriva Local Security Checks
high
39788Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : tiff vulnerability (USN-801-1)NessusUbuntu Local Security Checks
high
22992Solaris 10 (x86) : 119901-17 (deprecated)NessusSolaris Local Security Checks
high
22959Solaris 10 (sparc) : 119900-18 (deprecated)NessusSolaris Local Security Checks
high