CVE-2010-2597 — Improper Input Validation in Tiff

CWE-20 — Improper Input Validation8 documents7 sources
Severity
4.3MEDIUMNVD
EPSS
1.4%
top 19.26%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Debian TiffLibtiff
Timeline
PublishedJul 2
Latest updateMay 17

Description

The TIFFVStripSize function in tif_strip.c in LibTIFF 3.9.0 and 3.9.2 makes incorrect calls to the TIFFGetField function, which allows remote attackers to cause a denial of service (application crash) via a crafted TIFF image, related to "downsampled OJPEG input" and possibly related to a compiler optimization that triggers a divide-by-zero error.

CVSS vector

AV:N/AC:M/C:N/I:N/A:PExploitability: 8.6 | Impact: 2.9

Affected Packages2 packages

▶NVDlibtiff/libtiff3.9.0, 3.9.2+1
▶debiandebian/tiff< tiff 3.9.6-1 (bookworm)

Patches

Patch: bugzilla.redhat.com ↗Patch: bugzilla.redhat.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-frcc-38j9-x9v8: The TIFFVStripSize function in tif_strip↗2022-05-17
▶
OSV
CVE-2010-2597: The TIFFVStripSize function in tif_strip↗2010-07-02
▶

📋Vendor Advisories

4
Ubuntu
tiff regression↗2011-03-15
▶
Ubuntu
tiff vulnerabilities↗2011-03-07
▶
Red Hat
libtiff: use of uninitialized values crash↗2010-06-12
▶
Debian
CVE-2010-2597: tiff - The TIFFVStripSize function in tif_strip.c in LibTIFF 3.9.0 and 3.9.2 makes inco...↗2010
▶

💬Community

1
Bugzilla
CVE-2010-2597 libtiff: use of uninitialized values crash↗2010-07-02
▶