CVE-2010-2481

CVSS V2 Medium 4.3 CVSS V3 None
Description
The TIFFExtractData macro in LibTIFF before 3.9.4 does not properly handle unknown tag types in TIFF directory entries, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted TIFF file.
Overview
  • CVE ID
  • CVE-2010-2481
  • Assigner
  • secalert@redhat.com
  • Vulnerability Status
  • Modified
  • Published Version
  • 2010-07-06T17:17:13
  • Last Modified Date
  • 2023-02-13T04:21:15
Weakness Enumerations
CWE URL
CWE-119 http://cwe.mitre.org/data/definitions/119.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:* 1 OR 3.9.3
cpe:2.3:a:libtiff:libtiff:3.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.4:beta18:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.4:beta24:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.4:beta28:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.4:beta29:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.4:beta31:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.4:beta32:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.4:beta34:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.4:beta35:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.4:beta36:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.4:beta37:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.5.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.5.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.5.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.5.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.5.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.5.6:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.5.6:beta:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.5.7:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.5.7:alpha:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.5.7:alpha2:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.5.7:alpha3:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.5.7:alpha4:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.5.7:beta:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.6.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.6.0:beta:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.6.0:beta2:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.6.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.7.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.7.0:alpha:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.7.0:beta:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.7.0:beta2:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.7.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.7.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.7.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.7.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.8.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.8.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.8.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.9:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.9.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.9.0:beta:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.9.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.9.2:*:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:M/Au:N/C:N/I:N/A:P
  • Access Vector
  • NETWORK
  • Access Compatibility
  • MEDIUM
  • Authentication
  • NONE
  • Confidentiality Impact
  • NONE
  • Integrity Impact
  • NONE
  • Availability Impact
  • PARTIAL
  • Base Score
  • 4.3
  • Severity
  • MEDIUM
  • Exploitability Score
  • 8.6
  • Impact Score
  • 2.9
References
Reference URL Reference Tags
http://bugzilla.maptools.org/show_bug.cgi?id=2210 Exploit Patch
http://marc.info/?l=oss-security&m=127731610612908&w=2
http://marc.info/?l=oss-security&m=127736307002102&w=2
http://marc.info/?l=oss-security&m=127738540902757&w=2
http://marc.info/?l=oss-security&m=127781315415896&w=2
http://marc.info/?l=oss-security&m=127797353202873&w=2
http://security.gentoo.org/glsa/glsa-201209-02.xml
http://www.openwall.com/lists/oss-security/2010/06/30/22
http://www.redhat.com/support/errata/RHSA-2010-0519.html
http://www.vupen.com/english/advisories/2010/1761
https://access.redhat.com/errata/RHSA-2010:0519
https://access.redhat.com/security/cve/CVE-2010-2481
https://bugzilla.redhat.com/show_bug.cgi?id=611895
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2010-2481
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2481
History
Created Old Value New Value Data Type Notes
2022-05-10 10:45:17 Added to TrackCVE
2023-02-02 18:02:37 2023-02-02T17:17:44 CVE Modified Date updated
2023-02-02 18:02:39 The TIFFExtractData macro in LibTIFF before 3.9.4 does not properly handle unknown tag types in TIFF directory entries, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted TIFF file. CVE-2010-2481 libtiff: TIFFExtractData out-of-bounds read crash Description updated
2023-02-02 18:02:41 References updated
2023-02-13 05:03:43 2023-02-13T04:21:15 CVE Modified Date updated
2023-02-13 05:03:44 CVE-2010-2481 libtiff: TIFFExtractData out-of-bounds read crash The TIFFExtractData macro in LibTIFF before 3.9.4 does not properly handle unknown tag types in TIFF directory entries, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted TIFF file. Description updated