CVE-2010-2483
Fixed in a distro release EPSS 2%
The TIFFRGBAImageGet function in LibTIFF 3.9.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a TIFF file with an invalid combination of SamplesPerPixel and Photometric values.
Products: libtiff
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | tiff | 3.9.4-4 |
| Debian 13 | tiff | 3.9.4-4 |
| Debian 14 | tiff | 3.9.4-4 |
| Red Hat Enterprise Linux 4 | libtiff | 0:3.6.1-12.el4_8.5 |
| Red Hat Enterprise Linux 4 | libtiff-debuginfo | 0:3.6.1-12.el4_8.5 |
| Red Hat Enterprise Linux 4 | libtiff-devel | 0:3.6.1-12.el4_8.5 |
| Red Hat Enterprise Linux 5 | libtiff | 0:3.8.2-7.el5_5.5 |
| Red Hat Enterprise Linux 5 | libtiff-debuginfo | 0:3.8.2-7.el5_5.5 |
| Red Hat Enterprise Linux 5 | libtiff-devel | 0:3.8.2-7.el5_5.5 |