Published: 03/05/2011 Updated: 13/02/2023

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 685

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Heap-based buffer overflow in tif_ojpeg.c in the OJPEG decoder in LibTIFF prior to 3.9.5 allows remote malicious users to execute arbitrary code via a crafted TIFF file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libtiff libtiff 3.4
libtiff libtiff 3.7.0
libtiff libtiff 3.6.0
libtiff libtiff 3.6.1
libtiff libtiff 3.8.0
libtiff libtiff 3.7.3
libtiff libtiff 3.8.1
libtiff libtiff 3.9.3
libtiff libtiff 3.5.7
libtiff libtiff 3.8.2
libtiff libtiff 3.7.2
libtiff libtiff 3.9.2-5.2.1
libtiff libtiff 3.5.3
libtiff libtiff 3.7.1
libtiff libtiff 3.5.4
libtiff libtiff 3.5.2
libtiff libtiff
libtiff libtiff 3.9.2
libtiff libtiff 3.7.4
libtiff libtiff 3.5.5
libtiff libtiff 3.9.0
libtiff libtiff 3.5.6
libtiff libtiff 3.5.1
libtiff libtiff 3.9.1
libtiff libtiff 3.9

The TIFF library could be made to run programs as your login if it opened a specially crafted file ...

Tavis Ormandy discovered that the Tag Image File Format (TIFF) library is vulnerable to a buffer overflow triggered by a crafted OJPEG file which allows for a crash and potentially execution of arbitrary code The oldstable distribution (lenny) is not affected by this problem For the stable distribution (squeeze), this problem has been fixed in ve ...

Debian Bug report logs - #624287 CVE-2009-5022 Package: tiff; Maintainer for tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Moritz Muehlenhoff <muehlenhoff@univentionde> Date: Wed, 27 Apr 2011 07:15:02 UTC Severity: grave Tags: security Found in version 394-5 Fixed in versions 395-1, tiff/394 ...

Debian Bug report logs - #678140 Two tiff issues: CVE-2012-2113 / CVE-2012-2088 Package: tiff; Maintainer for tiff is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Moritz Muehlenhoff <muehlenhoff@univentionde> Date: Tue, 19 Jun 2012 14:09:03 UTC Severity: grave Tags: security Found in version 394-5+sque ...

##################################################################################### Application: IrfanView TIF Image Decompression Buffer Overflow Vulnerability Plateform: Windows Version: The vulnerabilities are confirmed in version 433 Other versions may also be affected Exploitation: Remote code execution Secunia Number: SA49856 ...

CWE-119 http://www.vupen.com/english/advisories/2011/1014 http://www.mandriva.com/security/advisories?name=MDVSA-2011:078 http://www.ubuntu.com/usn/USN-1120-1 http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058478.html https://bugzilla.redhat.com/show_bug.cgi?id=695885 http://www.securityfocus.com/bid/47338 http://securitytracker.com/id?1025380 http://www.remotesensing.org/libtiff/v3.9.5.html http://secunia.com/advisories/44271 http://www.redhat.com/support/errata/RHSA-2011-0452.html http://www.vupen.com/english/advisories/2011/1082 http://openwall.com/lists/oss-security/2011/04/12/10 http://bugzilla.maptools.org/show_bug.cgi?id=1999 http://www.debian.org/security/2011/dsa-2256 http://secunia.com/advisories/50726 http://security.gentoo.org/glsa/glsa-201209-02.xml https://exchange.xforce.ibmcloud.com/vulnerabilities/66774 https://usn.ubuntu.com/1120-1/https://nvd.nist.gov https://www.exploit-db.com/exploits/22681/

CVE-2009-5022

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect