[Forgot Password]
Login  Register Subscribe

23631

 
 

115038

 
 

96174

 
 

909

 
 

78077

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2009-2347

Date: (C)2009-07-14   (M)2017-09-22
 
CVSS Score: 9.3Access Vector: NETWORK
Exploitability Subscore: 8.6Access Complexity: MEDIUM
Impact Subscore: 10.0Authentication: NONE
 Confidentiality: COMPLETE
 Integrity: COMPLETE
 Availability: COMPLETE











Multiple integer overflows in inter-color spaces conversion tools in libtiff 3.8 through 3.8.2, 3.9, and 4.0 allow context-dependent attackers to execute arbitrary code via a TIFF image with large (1) width and (2) height values, which triggers a heap-based buffer overflow in the (a) cvt_whole_image function in tiff2rgba and (b) tiffcvt function in rgb2ycbcr.

Reference:
SECTRACK-1022539
http://www.securityfocus.com/archive/1/archive/1/504892/100/0/threaded
BID-35652
SECUNIA-35811
SECUNIA-35817
SECUNIA-35866
SECUNIA-35883
SECUNIA-35911
SECUNIA-36194
SECUNIA-50726
OSVDB-55821
OSVDB-55822
ADV-2009-1870
ADV-2011-0621
DSA-1835
FEDORA-2009-7724
FEDORA-2009-7775
GLSA-200908-03
GLSA-201209-02
MDVSA-2009:150
MDVSA-2011:043
RHSA-2009:1159
USN-801-1
http://article.gmane.org/gmane.linux.debian.devel.changes.unstable/178563/
http://bugzilla.maptools.org/show_bug.cgi?id=2079
http://www.ocert.org/advisories/ocert-2009-012.html
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2347
libtiff-rgb2ycbcr-tiff2rgba-bo(51688)

CPE    5
cpe:/a:libtiff:libtiff:4.0
cpe:/a:libtiff:libtiff:3.9
cpe:/a:libtiff:libtiff:3.8.2
cpe:/a:libtiff:libtiff:3.8.0
...
CWE    1
CWE-189
OVAL    14
oval:org.secpod.oval:def:102370
oval:org.secpod.oval:def:700392
oval:org.secpod.oval:def:300420
oval:org.secpod.oval:def:300473
...

© 2013 SecPod Technologies