CVE-2010-2595
Fixed in a distro release EPSS 3%
The TIFFYCbCrtoRGB function in LibTIFF 3.9.0 and 3.9.2, as used in ImageMagick, does not properly handle invalid ReferenceBlackWhite values, which allows remote attackers to cause a denial of service (application crash) via a crafted TIFF image that triggers an array index error, related to "downsampled OJPEG input."
Products: libtiff
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | tiff | 3.9.6-1 |
| Debian 13 | tiff | 3.9.6-1 |
| Debian 14 | tiff | 3.9.6-1 |
| Debian 6.0 | tiff | 3.9.4-5+squeeze5 |
| Red Hat Enterprise Linux 4 | libtiff | 0:3.6.1-12.el4_8.5 |
| Red Hat Enterprise Linux 4 | libtiff-debuginfo | 0:3.6.1-12.el4_8.5 |
| Red Hat Enterprise Linux 4 | libtiff-devel | 0:3.6.1-12.el4_8.5 |
| Red Hat Enterprise Linux 5 | libtiff | 0:3.8.2-7.el5_5.5 |
| Red Hat Enterprise Linux 5 | libtiff-debuginfo | 0:3.8.2-7.el5_5.5 |
| Red Hat Enterprise Linux 5 | libtiff-devel | 0:3.8.2-7.el5_5.5 |