LibTIFF - 'td_stripbytecount' Null Pointer Dereference Remote Denial of Service
| Reporter | Title | Published | Views | Family All 31 |
|---|---|---|---|---|
 | Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information | 28 Apr 201500:00 | – | bdu_fstec |
 | CVE-2010-2482 | 7 Aug 201000:00 | – | circl |
 | CVE-2010-2482 | 6 Jul 201014:00 | – | cve |
 | CVE-2010-2482 | 6 Jul 201014:00 | – | cvelist |
 | [SECURITY] [DSA 2552-1] tiff security update | 26 Sep 201221:55 | – | debian |
 | CVE-2010-2482 | 6 Jul 201014:00 | – | debiancve |
 | Debian DSA-2552-1 : tiff - several vulnerabilities | 27 Sep 201200:00 | – | nessus |
| GLSA-201209-02 : libTIFF: Multiple vulnerabilities | 24 Sep 201200:00 | – | nessus |
| Mandriva Linux Security Advisory : libtiff (MDVSA-2010:146) | 9 Aug 201000:00 | – | nessus |
| Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : tiff vulnerabilities (USN-1085-1) | 8 Mar 201100:00 | – | nessus |
10
From: https://www.securityfocus.com/bid/41480/
LibTIFF is prone to a denial-of-service vulnerability because it fails to properly validate user-supplied input.
An attacker can exploit this issue to crash an application that uses the vulnerable library, denying service to legitimate users. Due to the nature of this issue, attackers may be able to execute arbitrary code, but this has not been confirmed.
Versions up to and including libTIFF 3.9.4 are vulnerable.
PoC:
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/14573.tif.gz (lp589145-sample.tif.gz)Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
07 Aug 2010 00:00Current
8.3High risk
Vulners AI Score8.3
CVSS 24.3
EPSS0.08768