CVE-2010-2067

Published: Jun 24, 2010Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Stack-based buffer overflow in the TIFFFetchSubjectDistance function in tif_dirread.c in LibTIFF before 3.9.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long EXIF SubjectDistance field in a TIFF file.

Affected (6)

Products: Libtiff: Libtiff · Canonical: Ubuntu Linux

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Libtiff Libtiff	Before 3.9.4

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 8.04
Canonical Ubuntu Linux	Version 9.04
Canonical Ubuntu Linux	Version 9.10

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (28)

http://bugzilla.maptools.org/show_bug.cgi?id=2212

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=874

Source: secalert@redhat.com

Broken Link

http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://marc.info/?l=oss-security&m=127731610612908&w=2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://osvdb.org/65676

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/40241

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/40381

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/50726

Source: secalert@redhat.com

Third Party Advisory

http://security.gentoo.org/glsa/glsa-201209-02.xml

Source: secalert@redhat.com

Third Party Advisory

http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.596424

Source: secalert@redhat.com

Third Party Advisory

http://www.remotesensing.org/libtiff/v3.9.4.html

Source: secalert@redhat.com

Broken Link

http://www.ubuntu.com/usn/USN-954-1

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2010/1638

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=599576

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

http://bugzilla.maptools.org/show_bug.cgi?id=2212

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=874

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://marc.info/?l=oss-security&m=127731610612908&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://osvdb.org/65676

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://secunia.com/advisories/40241

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://secunia.com/advisories/40381

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://secunia.com/advisories/50726

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://security.gentoo.org/glsa/glsa-201209-02.xml

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.596424

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.remotesensing.org/libtiff/v3.9.4.html

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.ubuntu.com/usn/USN-954-1

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.vupen.com/english/advisories/2010/1638

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=599576

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

Timeline

No history available yet.