CVE-2010-1411
CVE-2010-1411
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Multiple integer overflows in the Fax3SetupState function in tif_fax3.c in the FAX3 decoder in LibTIFF before 3.9.3, as used in ImageIO in Apple Mac OS X 10.5.8 and Mac OS X 10.6 before 10.6.4, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF file that triggers a heap-based buffer overflow.
EPSS 12.9% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html
- http://support.apple.com/kb/HT4220
- http://lists.fedoraproject.org/pipermail/package-announce/2010-July/043835.html
- http://www.remotesensing.org/libtiff/v3.9.3.html
- http://secunia.com/advisories/40181
- http://www.vupen.com/english/advisories/2010/1481
- http://www.vupen.com/english/advisories/2010/1731
- http://secunia.com/advisories/40527
- http://www.securityfocus.com/bid/40823
- http://marc.info/?l=oss-security&m=127731610612908&w=2
- http://www.vupen.com/english/advisories/2010/1435
- http://www.vupen.com/english/advisories/2010/1638
- http://securitytracker.com/id?1024103
- http://secunia.com/advisories/40196
- http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.596424
- http://www.ubuntu.com/usn/USN-954-1
- http://support.apple.com/kb/HT4188
- http://www.vupen.com/english/advisories/2010/1761
- http://secunia.com/advisories/40220
- http://lists.apple.com/archives/security-announce/2010//Jun/msg00002.html
- http://security.gentoo.org/glsa/glsa-201209-02.xml
- http://www.redhat.com/support/errata/RHSA-2010-0520.html
- http://secunia.com/advisories/40536
- https://nvd.nist.gov/vuln/detail/CVE-2010-1411