Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2010-2065
HistoryJun 24, 2010 - 12:30 p.m.

CVE-2010-2065

2010-06-2412:30:01
CWE-189
[email protected]
web.nvd.nist.gov
30
cve-2010-2065
libtiff
integer overflow
buffer overflow
denial of service
arbitrary code
nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

9.7 High

AI Score

Confidence

High

0.051 Low

EPSS

Percentile

93.0%

JSON

Integer overflow in the TIFFroundup macro in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TIFF file that triggers a buffer overflow.

Affected configurations

NVD
Node
libtifflibtiffRange≤3.9.2
OR
libtifflibtiffMatch3.4
OR
libtifflibtiffMatch3.4beta18
OR
libtifflibtiffMatch3.4beta24
OR
libtifflibtiffMatch3.4beta28
OR
libtifflibtiffMatch3.4beta29
OR
libtifflibtiffMatch3.4beta31
OR
libtifflibtiffMatch3.4beta32
OR
libtifflibtiffMatch3.4beta34
OR
libtifflibtiffMatch3.4beta35
OR
libtifflibtiffMatch3.4beta36
OR
libtifflibtiffMatch3.4beta37
OR
libtifflibtiffMatch3.5.1
OR
libtifflibtiffMatch3.5.2
OR
libtifflibtiffMatch3.5.3
OR
libtifflibtiffMatch3.5.4
OR
libtifflibtiffMatch3.5.5
OR
libtifflibtiffMatch3.5.6
OR
libtifflibtiffMatch3.5.6beta
OR
libtifflibtiffMatch3.5.7
OR
libtifflibtiffMatch3.5.7alpha
OR
libtifflibtiffMatch3.5.7alpha2
OR
libtifflibtiffMatch3.5.7alpha3
OR
libtifflibtiffMatch3.5.7alpha4
OR
libtifflibtiffMatch3.5.7beta
OR
libtifflibtiffMatch3.6.0
OR
libtifflibtiffMatch3.6.0beta
OR
libtifflibtiffMatch3.6.0beta2
OR
libtifflibtiffMatch3.6.1
OR
libtifflibtiffMatch3.7.0
OR
libtifflibtiffMatch3.7.0alpha
OR
libtifflibtiffMatch3.7.0beta
OR
libtifflibtiffMatch3.7.0beta2
OR
libtifflibtiffMatch3.7.1
OR
libtifflibtiffMatch3.7.2
OR
libtifflibtiffMatch3.7.3
OR
libtifflibtiffMatch3.7.4
OR
libtifflibtiffMatch3.8.0
OR
libtifflibtiffMatch3.8.1
OR
libtifflibtiffMatch3.8.2
OR
libtifflibtiffMatch3.9
OR
libtifflibtiffMatch3.9.0
OR
libtifflibtiffMatch3.9.0beta
OR
libtifflibtiffMatch3.9.1

Related

nvd 1
prion 1
debiancve 1
ubuntucve 2
cvelist 1
openvas 20
fedora 4
ubuntu 1
nessus 8
securityvulns 2
slackware 1
gentoo 1
kitploit 1
nvd
nvd
CVE-2010-2065
2010-06-24 12:30:01
prion
prion
Integer overflow
2010-06-24 12:30:00
debiancve
debiancve
CVE-2010-2065
2010-06-24 12:30:01
ubuntucve
ubuntucve
CVE-2010-2065
2010-06-13 00:00:00
CVE-2010-2443
2010-06-24 00:00:00
cvelist
cvelist
CVE-2010-2065
2010-06-23 18:00:00
openvas
openvas
Slackware: Security Advisory (SSA:2010-180-02)
2012-09-10 00:00:00
Mandriva Update for libtiff MDVSA-2011:043 (libtiff)
2011-03-15 00:00:00
Mandriva Update for libtiff MDVSA-2011:043 (libtiff)
2011-03-15 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: libtiff-3.8.2-15.fc11
2010-06-24 16:30:10
[SECURITY] Fedora 12 Update: libtiff-3.9.4-1.fc12
2010-07-05 22:00:54
[SECURITY] Fedora 13 Update: libtiff-3.9.4-1.fc13
2010-07-01 18:43:16
ubuntu
ubuntu
tiff vulnerabilities
2010-06-21 00:00:00
nessus
nessus
Ubuntu 6.06 LTS / 8.04 LTS / 9.04 / 9.10 / 10.04 LTS : tiff vulnerabilities (USN-954-1)
2010-06-22 00:00:00
Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / 9.0 / 9.1 / current : libtiff (SSA:2010-180-02)
2010-07-01 00:00:00
Mandriva Linux Security Advisory : libtiff (MDVSA-2011:043)
2011-03-09 00:00:00
securityvulns
securityvulns
libtiff multiple security vulnerabilities
2010-06-29 00:00:00
[USN-954-1] tiff vulnerabilities
2010-06-23 00:00:00
slackware
slackware
[slackware-security] libtiff
2010-06-30 06:40:02
gentoo
gentoo
libTIFF: Multiple vulnerabilities
2012-09-23 00:00:00
kitploit
kitploit
Radamsa - A General-Purpose Fuzzer
2024-03-25 11:30:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

9.7 High

AI Score

Confidence

High

0.051 Low

EPSS

Percentile

93.0%

JSON
Related for CVE-2010-2065
nvd1prion1debiancve1ubuntucve2cvelist1openvas20fedora4ubuntu1nessus8securityvulns2slackware1gentoo1kitploit1