DSA-2552-1 tiff - several

Bulletin has no description...

CVE-2010-2630

Affected software: LibTIFF 3.9.0. Vulnerability: TIFFReadDirectory fails to properly validate the data types of codec-specific TIFF tags with an out-of-order position in a TIFF file. Impact: remote denial of service (application crash) via a crafted TIFF image. Root cause: insufficient validation...

CVE-2010-2630

The TIFFReadDirectory function in LibTIFF 3.9.0 does not properly validate the data types of codec-specific tags that have an out-of-order position in a TIFF file, which allows remote attackers to cause a denial of service application crash via a crafted file, a different vulnerability than...