CVE-2009-2347

Source
https://nvd.nist.gov/vuln/detail/CVE-2009-2347
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2009-2347.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2009-2347
Downstream
Related
Published
2009-07-14T20:30:00Z
Modified
2025-08-09T20:01:26Z
Summary
[none]
Details

Multiple integer overflows in inter-color spaces conversion tools in libtiff 3.8 through 3.8.2, 3.9, and 4.0 allow context-dependent attackers to execute arbitrary code via a TIFF image with large (1) width and (2) height values, which triggers a heap-based buffer overflow in the (a) cvtwholeimage function in tiff2rgba and (b) tiffcvt function in rgb2ycbcr.

References

Affected packages