Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

Privacy Policy
Terms of Service
Contact

CVE-2010-2443 — MEDIUM severity vulnerability | Release Alert

CVE-2010-2443

MEDIUMCVSS v2

Published

June 24, 2010

Affected

4 projects

Assigned by

MITRE

Severity scale

010

Description

The OJPEGReadBufferFill function in tif_ojpeg.c in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an OJPEG image with undefined strip offsets, related to the TIFFVGetField function.

libtiff/libtiff

GitLabTIFF Library and Utilities

= 3.4, = 3.7.0, = 3.6.0, = 3.6.1, = 3.8.0, = 3.7.3, = 3.8.1, = 3.8.2, = 3.7.2, = 3.5.2, = 3.5.3, = 3.5.4, = 3.7.1, = 3.5.7, = 3.5.5, = 3.9, = 3.5.6, = 3.5.1, <= 3.9.2, = 3.9.0, = 3.9.1, = 3.7.4NVD

rzkn/libtiff

GitLab

= 3.4, = 3.7.0, = 3.6.0, = 3.6.1, = 3.8.0, = 3.7.3, = 3.8.1, = 3.8.2, = 3.7.2, = 3.5.2, = 3.5.3, = 3.5.4, = 3.7.1, = 3.5.7, = 3.5.5, = 3.9, = 3.5.6, = 3.5.1, <= 3.9.2, = 3.9.0, = 3.9.1, = 3.7.4NVD

vadz/libtiff

More on this CVE

NVD↗GitHub Advisory↗

GitHubOBSOLETE and not updated any more libtiff mirror, see website for the new one

= 3.4, = 3.7.0, = 3.6.0, = 3.6.1, = 3.8.0, = 3.7.3, = 3.8.1, = 3.8.2, = 3.7.2, = 3.5.2, = 3.5.3, = 3.5.4, = 3.7.1, = 3.5.7, = 3.5.5, = 3.9, = 3.5.6, = 3.5.1, <= 3.9.2, = 3.9.0, = 3.9.1, = 3.7.4NVD

libsdl-org/libtiff

GitHubTIFF decoding library from https://gitlab.com/libtiff/libtiff

= 3.4, = 3.7.0, = 3.6.0, = 3.6.1, = 3.8.0, = 3.7.3, = 3.8.1, = 3.8.2, = 3.7.2, = 3.5.2, = 3.5.3, = 3.5.4, = 3.7.1, = 3.5.7, = 3.5.5, = 3.9, = 3.5.6, = 3.5.1, <= 3.9.2, = 3.9.0, = 3.9.1, = 3.7.4NVD