CVE-2009-2347: libtiff Numeric Errors

EPSS trend

Probability

4.15%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

0.00 pp

From 4.15% on 21-09-2026

21-09-202621-10-2026

EPSS score

4.15%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

30 links

secunia.com/advisories/35817Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/35866Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/archives/fedora-package-announce/2009-July/msg00663.htmlVendor AdvisoryX Refsource FEDORA
bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-2347X Refsource CONFIRMPatch
osvdb.org/55821VDB EntryX Refsource OSVDB
www.redhat.com/archives/fedora-package-announce/2009-July/msg00724.htmlVendor AdvisoryX Refsource FEDORA
www.vupen.com/english/advisories/2009/1870VDB EntryX Refsource VUPENPatchVendor Advisory
www.ocert.org/advisories/ocert-2009-012.htmlX Refsource MISCPatch
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10988VDB EntrySignatureX Refsource OVAL
www.securitytracker.com/id?1022539VDB EntryX Refsource SECTRACK

Show all 30 references

www.vupen.com/english/advisories/2011/0621VDB EntryX Refsource VUPEN
www.ubuntu.com/usn/USN-801-1Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/35811Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/35883Third Party AdvisoryX Refsource SECUNIA
security.gentoo.org/glsa/glsa-201209-02.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/36194Third Party AdvisoryX Refsource SECUNIA
bugzilla.maptools.org/show_bug.cgi?id=2079X Refsource CONFIRMPatch
www.securityfocus.com/archive/1/504892/100/0/threadedMailing ListX Refsource BUGTRAQ
www.mandriva.com/security/advisories?name=MDVSA-2009:150Vendor AdvisoryX Refsource MANDRIVAPatch
security.gentoo.org/glsa/glsa-200908-03.xmlVendor AdvisoryX Refsource GENTOO
exchange.xforce.ibmcloud.com/vulnerabilities/51688VDB EntryX Refsource XF
secunia.com/advisories/35911Third Party AdvisoryX Refsource SECUNIA
article.gmane.org/gmane.linux.debian.devel.changes.unstable/178563/X Refsource CONFIRMPatch
osvdb.org/55822VDB EntryX Refsource OSVDB
www.redhat.com/support/errata/RHSA-2009-1159.htmlVendor AdvisoryX Refsource REDHAT
www.securityfocus.com/bid/35652VDB EntryX Refsource BIDPatch
www.debian.org/security/2009/dsa-1835Vendor AdvisoryX Refsource DEBIAN
www.mandriva.com/security/advisories?name=MDVSA-2011:043Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/50726Third Party AdvisoryX Refsource SECUNIA
security-tracker.debian.org/tracker/CVE-2009-2347Advisory

Related vulnerabilities

CVE-2018-5360debiantiff+31.82%8y ago14-01-2018 02:00LibTIFF before 4.0.6 mishandles the reading of TIFF files, as demonstrated by a heap-based buffer over-read in the ReadTIFFImage function in coders/tiff.c in GraphicsMagick 1.3.27.CVE-2018-10963alpinetiff+53.64%8y ago10-05-2018 02:00The TIFFWriteDirectorySec() function in tif_dirwrite.c in LibTIFF through 4.0.9 allows remote attackers to cause a denial of service (assertion failure and application crash) via a crafted file, a different vulnerability than CVE-2017-13726.CVE-2013-4231debiantiff+27.40%12y ago19-01-2014 15:00Multiple buffer overflows in libtiff before 4.0.3 allow remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1) extension block in a GIF image or (2) GIF raster image to tools/gif2tiff.c or (3) a long filename for a TIFF image to tools/rgb2ycbcr.c. NOTE: vectors 1 and 3 are disputed by Red Hat, which states that the input cannot exceed the allocated buffer size.CVE-2013-4243debiantiff+57.17%13y ago10-09-2013 19:00Heap-based buffer overflow in the readgifimage function in the gif2tiff tool in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted height and width values in a GIF image.CVE-2013-4232debiantiff+35.02%13y ago10-09-2013 19:00Use-after-free vulnerability in the t2p_readwrite_pdf_image function in tools/tiff2pdf.c in libtiff 4.0.3 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted TIFF image.CVE-2013-4244debiantiff+42.70%13y ago28-09-2013 19:00The LZW decompressor in the gif2tiff tool in libtiff 4.0.3 and earlier allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a crafted GIF image.

All vulnerabilities inlibtiff

CVE-2009-2347: libtiff Numeric Errors

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References