Lucene search
HistoryJul 02, 2010 - 12:43 p.m.
CVE-2010-2596
cve-2010-2596
libtiff
tif_ojpeg.c
denial of service
assertion failure
application exit
crafted image
nvd
8.7 High
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.011 Low
EPSS
Percentile
83.9%
The OJPEGPostDecode function in tif_ojpeg.c in LibTIFF 3.9.0 and 3.9.2, as used in tiff2ps, allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted TIFF image, related to “downsampled OJPEG input.”
| CPE | Name | Operator | Version |
|---|---|---|---|
| libtiff:libtiff | libtiff | eq | 3.9.2 |
| libtiff:libtiff | libtiff | eq | 3.9.0 |
Related
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:57:41
Denial Of Service (DoS)
2019-05-02 05:01:26
Denial Of Service (DoS)
2019-05-02 05:01:26
f5
f5
K16718 : libTIFF vulnerability CVE-2010-2596
2015-06-04 00:00:00
SOL16718 - libTIFF vulnerability CVE-2010-2596
2015-06-04 00:00:00
prion
prion
Input validation
2010-07-02 12:43:00
debiancve
debiancve
CVE-2010-2596
2010-07-02 12:43:00
ubuntucve
ubuntucve
CVE-2010-2596
2010-07-02 00:00:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2014-307)
2015-09-08 00:00:00
RedHat Update for libtiff RHSA-2014:0222-01
2014-03-04 00:00:00
CentOS Update for libtiff CESA-2014:0222 centos6
2014-03-04 00:00:00
amazon
amazon
Medium: libtiff
2014-03-13 18:13:00
nessus
nessus
Amazon Linux AMI : libtiff (ALAS-2014-307)
2014-03-18 00:00:00
Oracle Linux 6 : libtiff (ELSA-2014-0222)
2014-02-28 00:00:00
Scientific Linux Security Update : libtiff on SL6.x i386/x86_64 (20140227)
2014-02-28 00:00:00
oraclelinux
oraclelinux
libtiff security update
2014-02-27 00:00:00
redhat
redhat
(RHSA-2014:0222) Moderate: libtiff security update
2014-02-27 00:00:00
(RHSA-2014:0339) Important: rhev-hypervisor6 security update
2014-03-31 00:00:00
centos
centos
libtiff security update
2014-02-28 00:43:50
debian
debian
[SECURITY] [DLA 610-1] tiff3 security update
2016-09-04 22:04:45
gentoo
gentoo
libTIFF: Multiple vulnerabilities
2012-09-23 00:00:00
archlinux
archlinux
[ASA-201611-26] libtiff: multiple issues
2016-11-25 00:00:00
[ASA-201611-27] lib32-libtiff: multiple issues
2016-11-25 00:00:00
kitploit
kitploit
arch-audit - An utility like pkg-audit for Arch Linux
2016-10-15 14:30:00
8.7 High
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.011 Low
EPSS
Percentile
83.9%
Related for CVE-2010-2596