CVE-2010-2597
Fixed in a distro release EPSS 3%
The TIFFVStripSize function in tif_strip.c in LibTIFF 3.9.0 and 3.9.2 makes incorrect calls to the TIFFGetField function, which allows remote attackers to cause a denial of service (application crash) via a crafted TIFF image, related to "downsampled OJPEG input" and possibly related to a compiler optimization that triggers a divide-by-zero error.
Products: libtiff
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | tiff | 3.9.6-1 |
| Debian 13 | tiff | 3.9.6-1 |
| Debian 14 | tiff | 3.9.6-1 |
| Debian 6.0 | tiff | 3.9.4-5+squeeze5 |
| Red Hat Enterprise Linux 4 | libtiff | 0:3.6.1-12.el4_8.5 |
| Red Hat Enterprise Linux 4 | libtiff-debuginfo | 0:3.6.1-12.el4_8.5 |
| Red Hat Enterprise Linux 4 | libtiff-devel | 0:3.6.1-12.el4_8.5 |
| Red Hat Enterprise Linux 5 | libtiff | 0:3.8.2-7.el5_5.5 |
| Red Hat Enterprise Linux 5 | libtiff-debuginfo | 0:3.8.2-7.el5_5.5 |
| Red Hat Enterprise Linux 5 | libtiff-devel | 0:3.8.2-7.el5_5.5 |