Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-0191
HistoryMar 02, 2011 - 12:00 a.m.

CVE-2011-0191

2011-03-0200:00:00
ubuntu.com
ubuntu.com
12

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.034 Low

EPSS

Percentile

91.3%

Buffer overflow in LibTIFF 3.9.4 and possibly other versions, as used in
ImageIO in Apple iTunes before 10.2 on Windows and other products, allows
remote attackers to execute arbitrary code or cause a denial of service
(application crash) via a crafted TIFF image with JPEG encoding.

Notes

Author Note
mdeslaur this doesn’t reproduce on 3.9.4 in lucid+
OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchtiff< 3.7.4-1ubuntu3.9UNKNOWN
ubuntu8.04noarchtiff< 3.8.2-7ubuntu3.7UNKNOWN
ubuntu9.10noarchtiff< 3.8.2-13ubuntu0.4UNKNOWN

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.034 Low

EPSS

Percentile

91.3%