CVE-2009-2347

CVE-2009-2347 describes multiple integer overflows in libtiff versions 3.8 through 3.8.2, 3.9, and 4.0, specifically within inter-color space conversion tools like tiff2rgba and rgb2ycbcr. These flaws allow attackers to execute arbitrary code by crafting a malicious TIFF image with large width and height values, leading to a heap-based buffer overflow. With a CVSS score of 9.3, this vulnerability is critical, indicating a network-based attack with medium complexity that can result in complete compromise of confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.