PT-2010-1125 · Libtiff · Libtiff+1
Tomas Hoger
·
Publicado
2010-07-01
·
Atualizado
2024-06-15
·
CVE-2010-2233
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
LibTIFF versions 3.9.0 through 3.9.2
tiff versions prior to 4.0.2-r1
Description
The issue is related to the improper handling of vertical flips in TIFF images, which can lead to a denial of service or possibly allow remote attackers to execute arbitrary code via a crafted TIFF image. Multiple vulnerabilities in the tiff package can compromise the confidentiality, integrity, and availability of protected information and can be exploited remotely.
Recommendations
For LibTIFF versions 3.9.0 through 3.9.2, update to a version that properly handles vertical flips in TIFF images.
For tiff versions prior to 4.0.2-r1, update to version 4.0.2-r1 or later to address the multiple vulnerabilities.
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Libtiff
Tiff