CVE-2010-1411
Fixed in a distro release EPSS 13%
Multiple integer overflows in the Fax3SetupState function in tif_fax3.c in the FAX3 decoder in LibTIFF before 3.9.3, as used in ImageIO in Apple Mac OS X 10.5.8 and Mac OS X 10.6 before 10.6.4, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF file that triggers a heap-based buffer overflow.
Products: apple mac_os_x, apple mac_os_x_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | tiff | 3.9.4-1 |
| Debian 13 | tiff | 3.9.4-1 |
| Debian 14 | tiff | 3.9.4-1 |
| Debian 5.0 | tiff | 3.8.2-11.3 |
| Red Hat Enterprise Linux 3 | libtiff | 0:3.5.7-34.el3 |
| Red Hat Enterprise Linux 3 | libtiff-debuginfo | 0:3.5.7-34.el3 |
| Red Hat Enterprise Linux 3 | libtiff-devel | 0:3.5.7-34.el3 |
| Red Hat Enterprise Linux 4 | libtiff | 0:3.6.1-12.el4_8.5 |
| Red Hat Enterprise Linux 4 | libtiff-debuginfo | 0:3.6.1-12.el4_8.5 |
| Red Hat Enterprise Linux 4 | libtiff-devel | 0:3.6.1-12.el4_8.5 |
| Red Hat Enterprise Linux 5 | libtiff | 0:3.8.2-7.el5_5.5 |
| Red Hat Enterprise Linux 5 | libtiff-debuginfo | 0:3.8.2-7.el5_5.5 |
| Red Hat Enterprise Linux 5 | libtiff-devel | 0:3.8.2-7.el5_5.5 |