CVE-2009-5022

Name of the Vulnerable Software and Affected Versions LibTIFF versions prior to 3.9.5 tiff package versions prior to 4.0.2-r1

Description The issue is related to a heap-based buffer overflow in the OJPEG decoder in LibTIFF, which can be exploited by remote attackers via a crafted TIFF file, potentially leading to the execution of arbitrary code. Multiple vulnerabilities in the tiff package may also compromise the confidentiality, integrity, and availability of protected information, and can be exploited remotely.

Recommendations For LibTIFF versions prior to 3.9.5, update to version 3.9.5 or later to resolve the issue. For tiff package versions prior to 4.0.2-r1, update to version 4.0.2-r1 or later to address the vulnerabilities.