CVE-2010-2481
Fixed in a distro release EPSS 3%
The TIFFExtractData macro in LibTIFF before 3.9.4 does not properly handle unknown tag types in TIFF directory entries, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted TIFF file.
Products: libtiff
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | tiff | 3.9.4-1 |
| Debian 13 | tiff | 3.9.4-1 |
| Debian 14 | tiff | 3.9.4-1 |
| Red Hat Enterprise Linux 4 | libtiff | 0:3.6.1-12.el4_8.5 |
| Red Hat Enterprise Linux 4 | libtiff-debuginfo | 0:3.6.1-12.el4_8.5 |
| Red Hat Enterprise Linux 4 | libtiff-devel | 0:3.6.1-12.el4_8.5 |
| Red Hat Enterprise Linux 5 | libtiff | 0:3.8.2-7.el5_5.5 |
| Red Hat Enterprise Linux 5 | libtiff-debuginfo | 0:3.8.2-7.el5_5.5 |
| Red Hat Enterprise Linux 5 | libtiff-devel | 0:3.8.2-7.el5_5.5 |