CVE-2010-2630
Fixed in a distro release EPSS 5%
The TIFFReadDirectory function in LibTIFF 3.9.0 does not properly validate the data types of codec-specific tags that have an out-of-order position in a TIFF file, which allows remote attackers to cause a denial of service (application crash) via a crafted file, a different vulnerability than CVE-2010-2481.
Products: libtiff
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | tiff | 3.9.6-1 |
| Debian 13 | tiff | 3.9.6-1 |
| Debian 14 | tiff | 3.9.6-1 |
| Debian 6.0 | tiff | 3.9.4-5+squeeze5 |