Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-2631
HistoryJul 06, 2010 - 12:00 a.m.

CVE-2010-2631

2010-07-0600:00:00
ubuntu.com
ubuntu.com
10

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.005 Low

EPSS

Percentile

76.8%

LibTIFF 3.9.0 ignores tags in certain situations during the first stage of
TIFF file processing and does not properly handle this during the second
stage, which allows remote attackers to cause a denial of service
(application crash) via a crafted file, a different vulnerability than
CVE-2010-2481.

Bugs

Notes

Author Note
mdeslaur same patch as CVE-2010-2481
OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchtiff< 3.7.4-1ubuntu3.8UNKNOWN
ubuntu8.04noarchtiff< 3.8.2-7ubuntu3.6UNKNOWN
ubuntu9.10noarchtiff< 3.8.2-13ubuntu0.3UNKNOWN
ubuntu10.04noarchtiff< 3.9.2-2ubuntu0.3UNKNOWN

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.005 Low

EPSS

Percentile

76.8%