PT-2010-1133 · Gentoo+1 · Gentoo Linux+1

Tom Lane · Published 2010-07-06 · Updated 2013-05-15 · CVE-2010-2631

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions LibTIFF versions prior to 4.0.2 tiff package versions prior to 4.0.2-r1 in Gentoo Linux

Description The issue allows remote attackers to cause problems with the confidentiality, integrity, and availability of protected information via a crafted file. This can lead to a denial of service, such as an application crash, due to improper handling of certain tags during TIFF file processing.

Recommendations For LibTIFF versions prior to 4.0.2, update to version 4.0.2 or later to resolve the issue. For tiff package versions prior to 4.0.2-r1 in Gentoo Linux, update to version 4.0.2-r1 or later to resolve the issue.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

CWE-189

Related Identifiers

BDU:2015-09646

CVE-2010-2631

Affected Products

Gentoo Linux

Libtiff

References · 10

• 🔥 https://exploit-db.com/exploits/34279 · Exploit
• 🔥 http://bugzilla.maptools.org/show_bug.cgi?id=2210 · Exploit
• http://security.gentoo.org/glsa/glsa-201209-02.xml · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2010-2631 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-2631 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09646 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2010-2631 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2010-2631 · Vendor Advisory
• https://xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.7 · Note
• http://secunia.com/advisories/50726 · Note