Lucene search
HistoryJul 02, 2010 - 12:43 p.m.
CVE-2010-2596
cve-2010-2596
libtiff
tif_ojpeg.c
denial of service
assertion failure
application exit
crafted image
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
8.7 High
AI Score
Confidence
High
0.015 Low
EPSS
Percentile
86.9%
The OJPEGPostDecode function in tif_ojpeg.c in LibTIFF 3.9.0 and 3.9.2, as used in tiff2ps, allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted TIFF image, related to “downsampled OJPEG input.”
Affected configurations
Node
libtifflibtiffMatch3.9.0
ORlibtifflibtiffMatch3.9.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| libtiff:libtiff | libtiff | eq | 3.9.0 |
| libtiff:libtiff | libtiff | eq | 3.9.2 |
Related
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:57:41
Denial Of Service (DoS)
2019-05-02 05:01:26
Denial Of Service (DoS)
2019-05-02 05:01:26
f5
f5
K16718 : libTIFF vulnerability CVE-2010-2596
2015-06-04 00:00:00
SOL16718 - libTIFF vulnerability CVE-2010-2596
2015-06-04 00:00:00
prion
prion
Input validation
2010-07-02 12:43:00
nvd
nvd
CVE-2010-2596
2010-07-02 12:43:53
cvelist
cvelist
CVE-2010-2596
2010-07-01 18:00:00
debiancve
debiancve
CVE-2010-2596
2010-07-02 12:43:53
ubuntucve
ubuntucve
CVE-2010-2596
2010-07-02 00:00:00
oraclelinux
oraclelinux
libtiff security update
2014-02-27 00:00:00
nessus
nessus
RHEL 6 : libtiff (RHSA-2014:0222)
2014-02-28 00:00:00
Scientific Linux Security Update : libtiff on SL6.x i386/x86_64 (20140227)
2014-02-28 00:00:00
Amazon Linux AMI : libtiff (ALAS-2014-307)
2014-03-18 00:00:00
centos
centos
libtiff security update
2014-02-28 00:43:50
redhat
redhat
(RHSA-2014:0222) Moderate: libtiff security update
2014-02-27 00:00:00
(RHSA-2014:0339) Important: rhev-hypervisor6 security update
2014-03-31 00:00:00
openvas
openvas
RedHat Update for libtiff RHSA-2014:0222-01
2014-03-04 00:00:00
Amazon Linux: Security Advisory (ALAS-2014-307)
2015-09-08 00:00:00
RedHat Update for libtiff RHSA-2014:0222-01
2014-03-04 00:00:00
amazon
amazon
Medium: libtiff
2014-03-13 18:13:00
debian
debian
[SECURITY] [DLA 610-1] tiff3 security update
2016-09-04 22:04:45
gentoo
gentoo
libTIFF: Multiple vulnerabilities
2012-09-23 00:00:00
archlinux
archlinux
[ASA-201611-26] libtiff: multiple issues
2016-11-25 00:00:00
[ASA-201611-27] lib32-libtiff: multiple issues
2016-11-25 00:00:00
kitploit
kitploit
arch-audit - An utility like pkg-audit for Arch Linux
2016-10-15 14:30:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
8.7 High
AI Score
Confidence
High
0.015 Low
EPSS
Percentile
86.9%
Related for CVE-2010-2596