Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2010-2067
HistoryJun 24, 2010 - 12:30 p.m.

CVE-2010-2067

2010-06-2412:30:01
CWE-119
[email protected]
web.nvd.nist.gov
31
cve
2010
2067
stack-based buffer overflow
libtiff
denial of service
application crash
execute arbitrary code
exif
tiff

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.1 High

AI Score

Confidence

High

0.026 Low

EPSS

Percentile

90.4%

JSON

Stack-based buffer overflow in the TIFFFetchSubjectDistance function in tif_dirread.c in LibTIFF before 3.9.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long EXIF SubjectDistance field in a TIFF file.

Affected configurations

NVD
Node
libtifflibtiffRange<3.9.4
Node
canonicalubuntu_linuxMatch6.06lts
OR
canonicalubuntu_linuxMatch8.04lts
OR
canonicalubuntu_linuxMatch9.04
OR
canonicalubuntu_linuxMatch9.10
OR
canonicalubuntu_linuxMatch10.04lts
CPENameOperatorVersion
libtiff:libtifflibtifflt3.9.4

Related

cvelist 1
debiancve 1
securityvulns 3
nessus 7
ubuntucve 1
prion 1
nvd 1
slackware 1
openvas 14
ubuntu 1
fedora 3
gentoo 1
cvelist
cvelist
CVE-2010-2067
2010-06-23 18:00:00
debiancve
debiancve
CVE-2010-2067
2010-06-24 12:30:01
securityvulns
securityvulns
iDefense Security Advisory 06.21.10: Multiple Vendor LibTIFF 3.9.2 Stack Buffer Overflow Vulnerability
2010-06-29 00:00:00
libtiff multiple security vulnerabilities
2010-06-29 00:00:00
[USN-954-1] tiff vulnerabilities
2010-06-23 00:00:00
nessus
nessus
openSUSE Security Update : libtiff-devel (openSUSE-SU-2010:0420-1)
2014-06-13 00:00:00
Ubuntu 6.06 LTS / 8.04 LTS / 9.04 / 9.10 / 10.04 LTS : tiff vulnerabilities (USN-954-1)
2010-06-22 00:00:00
Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / 9.0 / 9.1 / current : libtiff (SSA:2010-180-02)
2010-07-01 00:00:00
ubuntucve
ubuntucve
CVE-2010-2067
2010-06-16 00:00:00
prion
prion
Stack overflow
2010-06-24 12:30:00
nvd
nvd
CVE-2010-2067
2010-06-24 12:30:01
slackware
slackware
[slackware-security] libtiff
2010-06-30 06:40:02
openvas
openvas
Slackware Advisory SSA:2010-180-02 libtiff
2012-09-11 00:00:00
Slackware: Security Advisory (SSA:2010-180-02)
2012-09-10 00:00:00
Ubuntu Update for tiff vulnerabilities USN-954-1
2010-06-25 00:00:00
ubuntu
ubuntu
tiff vulnerabilities
2010-06-21 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: libtiff-3.9.4-1.fc13
2010-07-01 18:43:16
[SECURITY] Fedora 12 Update: libtiff-3.9.4-1.fc12
2010-07-05 22:00:54
[SECURITY] Fedora 13 Update: libtiff-3.9.4-4.fc13
2011-04-11 20:58:53
gentoo
gentoo
libTIFF: Multiple vulnerabilities
2012-09-23 00:00:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.1 High

AI Score

Confidence

High

0.026 Low

EPSS

Percentile

90.4%

JSON
Related for CVE-2010-2067
cvelist1debiancve1securityvulns3nessus7ubuntucve1prion1nvd1slackware1openvas14ubuntu1fedora3gentoo1