5

CVE-2010-2443

The OJPEGReadBufferFill function in tif_ojpeg.c in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an OJPEG image with undefined strip offsets, related to the TIFFVGetField function.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Libtiff ≫ Libtiff Version <= 3.9.2
Libtiff ≫ Libtiff Version 3.4
Libtiff ≫ Libtiff Version 3.4 Update beta18
Libtiff ≫ Libtiff Version 3.4 Update beta24
Libtiff ≫ Libtiff Version 3.4 Update beta28
Libtiff ≫ Libtiff Version 3.4 Update beta29
Libtiff ≫ Libtiff Version 3.4 Update beta31
Libtiff ≫ Libtiff Version 3.4 Update beta32
Libtiff ≫ Libtiff Version 3.4 Update beta34
Libtiff ≫ Libtiff Version 3.4 Update beta35
Libtiff ≫ Libtiff Version 3.4 Update beta36
Libtiff ≫ Libtiff Version 3.4 Update beta37
Libtiff ≫ Libtiff Version 3.5.1
Libtiff ≫ Libtiff Version 3.5.2
Libtiff ≫ Libtiff Version 3.5.3
Libtiff ≫ Libtiff Version 3.5.4
Libtiff ≫ Libtiff Version 3.5.5
Libtiff ≫ Libtiff Version 3.5.6
Libtiff ≫ Libtiff Version 3.5.6 Update beta
Libtiff ≫ Libtiff Version 3.5.7
Libtiff ≫ Libtiff Version 3.5.7 Update alpha
Libtiff ≫ Libtiff Version 3.5.7 Update alpha2
Libtiff ≫ Libtiff Version 3.5.7 Update alpha3
Libtiff ≫ Libtiff Version 3.5.7 Update alpha4
Libtiff ≫ Libtiff Version 3.5.7 Update beta
Libtiff ≫ Libtiff Version 3.6.0
Libtiff ≫ Libtiff Version 3.6.0 Update beta
Libtiff ≫ Libtiff Version 3.6.0 Update beta2
Libtiff ≫ Libtiff Version 3.6.1
Libtiff ≫ Libtiff Version 3.7.0
Libtiff ≫ Libtiff Version 3.7.0 Update alpha
Libtiff ≫ Libtiff Version 3.7.0 Update beta
Libtiff ≫ Libtiff Version 3.7.0 Update beta2
Libtiff ≫ Libtiff Version 3.7.1
Libtiff ≫ Libtiff Version 3.7.2
Libtiff ≫ Libtiff Version 3.7.3
Libtiff ≫ Libtiff Version 3.7.4
Libtiff ≫ Libtiff Version 3.8.0
Libtiff ≫ Libtiff Version 3.8.1
Libtiff ≫ Libtiff Version 3.8.2
Libtiff ≫ Libtiff Version 3.9
Libtiff ≫ Libtiff Version 3.9.0
Libtiff ≫ Libtiff Version 3.9.0 Update beta
Libtiff ≫ Libtiff Version 3.9.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.19% 0.864
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/50726
http://security.gentoo.org/glsa/glsa-201209-02.xml
http://www.remotesensing.org/libtiff/v3.9.3.html
http://blogs.sun.com/security/entry/cve_2010_2065_cve_2010
http://www.vupen.com/english/advisories/2011/0204
Vendor Advisory
http://marc.info/?l=oss-security&m=127736307002102&w=2
http://marc.info/?l=oss-security&m=127781315415896&w=2
https://bugs.launchpad.net/ubuntu/lucid/+source/tiff/+bug/589145