Cloudanix VulnDB

CVE-2010-1411

None

CVSS

—

EPSS

12.9%

Published

Jun 17, 2010

CISA due date

—

The record

Multiple integer overflows in the Fax3SetupState function in tif_fax3.c in the FAX3 decoder in LibTIFF before 3.9.3, as used in ImageIO in Apple Mac OS X 10.5.8 and Mac OS X 10.6 before 10.6.4, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF file that triggers a heap-based buffer overflow.

Affected packages

Ecosystem Package Introduced Fixed
Debian:11 tiff 0 3.9.4-1
Debian:12 tiff 0 3.9.4-1
Debian:13 tiff 0 3.9.4-1
Debian:5.0 tiff 0 3.8.2-11.3
Red Hat:enterprise_linux:3::as libtiff 0 0:3.5.7-34.el3
Red Hat:enterprise_linux:3::as libtiff-debuginfo 0 0:3.5.7-34.el3
Red Hat:enterprise_linux:3::as libtiff-devel 0 0:3.5.7-34.el3
Red Hat:enterprise_linux:3::desktop libtiff 0 0:3.5.7-34.el3
Red Hat:enterprise_linux:3::desktop libtiff-debuginfo 0 0:3.5.7-34.el3
Red Hat:enterprise_linux:3::desktop libtiff-devel 0 0:3.5.7-34.el3
Red Hat:enterprise_linux:3::es libtiff 0 0:3.5.7-34.el3
Red Hat:enterprise_linux:3::es libtiff-debuginfo 0 0:3.5.7-34.el3
Red Hat:enterprise_linux:3::es libtiff-devel 0 0:3.5.7-34.el3
Red Hat:enterprise_linux:3::ws libtiff 0 0:3.5.7-34.el3
Red Hat:enterprise_linux:3::ws libtiff-debuginfo 0 0:3.5.7-34.el3
Red Hat:enterprise_linux:3::ws libtiff-devel 0 0:3.5.7-34.el3
Red Hat:enterprise_linux:4::as libtiff 0 0:3.6.1-12.el4_8.5
Red Hat:enterprise_linux:4::as libtiff-debuginfo 0 0:3.6.1-12.el4_8.5
Red Hat:enterprise_linux:4::as libtiff-devel 0 0:3.6.1-12.el4_8.5
Red Hat:enterprise_linux:4::desktop libtiff 0 0:3.6.1-12.el4_8.5
Red Hat:enterprise_linux:4::desktop libtiff-debuginfo 0 0:3.6.1-12.el4_8.5
Red Hat:enterprise_linux:4::desktop libtiff-devel 0 0:3.6.1-12.el4_8.5
Red Hat:enterprise_linux:4::es libtiff 0 0:3.6.1-12.el4_8.5
Red Hat:enterprise_linux:4::es libtiff-debuginfo 0 0:3.6.1-12.el4_8.5
Red Hat:enterprise_linux:4::es libtiff-devel 0 0:3.6.1-12.el4_8.5
Red Hat:enterprise_linux:4::ws libtiff 0 0:3.6.1-12.el4_8.5
Red Hat:enterprise_linux:4::ws libtiff-debuginfo 0 0:3.6.1-12.el4_8.5
Red Hat:enterprise_linux:4::ws libtiff-devel 0 0:3.6.1-12.el4_8.5
Red Hat:enterprise_linux:5::client libtiff 0 0:3.8.2-7.el5_5.5
Red Hat:enterprise_linux:5::client libtiff-debuginfo 0 0:3.8.2-7.el5_5.5
Red Hat:enterprise_linux:5::client libtiff-devel 0 0:3.8.2-7.el5_5.5
Red Hat:enterprise_linux:5::client_workstation libtiff 0 0:3.8.2-7.el5_5.5
Red Hat:enterprise_linux:5::client_workstation libtiff-debuginfo 0 0:3.8.2-7.el5_5.5
Red Hat:enterprise_linux:5::client_workstation libtiff-devel 0 0:3.8.2-7.el5_5.5
Red Hat:enterprise_linux:5::server libtiff 0 0:3.8.2-7.el5_5.5
Red Hat:enterprise_linux:5::server libtiff-debuginfo 0 0:3.8.2-7.el5_5.5
Red Hat:enterprise_linux:5::server libtiff-devel 0 0:3.8.2-7.el5_5.5

Related vulnerabilities