PT-2010-1133 · Gentoo+1 · Gentoo Linux+1

Tom Lane · Publicado 2010-07-06 · Atualizado 2013-05-15 · CVE-2010-2631

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions LibTIFF versions prior to 4.0.2 tiff package versions prior to 4.0.2-r1 in Gentoo Linux

Description The issue allows remote attackers to cause problems with the confidentiality, integrity, and availability of protected information via a crafted file. This can lead to a denial of service, such as an application crash, due to improper handling of certain tags during TIFF file processing.

Recommendations For LibTIFF versions prior to 4.0.2, update to version 4.0.2 or later to resolve the issue. For tiff package versions prior to 4.0.2-r1 in Gentoo Linux, update to version 4.0.2-r1 or later to resolve the issue.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

CWE-189

Identificadores relacionados

BDU:2015-09646

CVE-2010-2631

Produtos afetados

Gentoo Linux

Libtiff

Referências · 10

• 🔥 https://exploit-db.com/exploits/34279 · Exploit
• 🔥 http://bugzilla.maptools.org/show_bug.cgi?id=2210 · Exploit
• http://security.gentoo.org/glsa/glsa-201209-02.xml · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2010-2631 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-2631 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-09646 · Nota de Segurança
• https://xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.7 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-2631 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2010-2631 · Aviso do Fabricante
• http://secunia.com/advisories/50726 · Nota