CVE-2010-2443

Published: Jun 24, 2010Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The OJPEGReadBufferFill function in tif_ojpeg.c in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an OJPEG image with undefined strip offsets, related to the TIFFVGetField function.

Affected (44)

Products: Libtiff: Libtiff

Libtiff

1 product

Libtiff

Configuration A

44 vulnerable

Vulnerable Software	Affected Versions
Libtiff Libtiff	Up to 3.9.2
Libtiff Libtiff	Version 3.4
Libtiff Libtiff	Version 3.4 beta18
Libtiff Libtiff	Version 3.4 beta24
Libtiff Libtiff	Version 3.4 beta28
Libtiff Libtiff	Version 3.4 beta29
Libtiff Libtiff	Version 3.4 beta31
Libtiff Libtiff	Version 3.4 beta32
Libtiff Libtiff	Version 3.4 beta34
Libtiff Libtiff	Version 3.4 beta35
Libtiff Libtiff	Version 3.4 beta36
Libtiff Libtiff	Version 3.4 beta37
Libtiff Libtiff	Version 3.5.1
Libtiff Libtiff	Version 3.5.2
Libtiff Libtiff	Version 3.5.3
Libtiff Libtiff	Version 3.5.4
Libtiff Libtiff	Version 3.5.5
Libtiff Libtiff	Version 3.5.6
Libtiff Libtiff	Version 3.5.6 beta
Libtiff Libtiff	Version 3.5.7
Libtiff Libtiff	Version 3.5.7 alpha2
Libtiff Libtiff	Version 3.5.7 alpha3
Libtiff Libtiff	Version 3.5.7 alpha4
Libtiff Libtiff	Version 3.5.7 alpha
Libtiff Libtiff	Version 3.5.7 beta
Libtiff Libtiff	Version 3.6.0
Libtiff Libtiff	Version 3.6.0 beta2
Libtiff Libtiff	Version 3.6.0 beta
Libtiff Libtiff	Version 3.6.1
Libtiff Libtiff	Version 3.7.0
Libtiff Libtiff	Version 3.7.0 alpha
Libtiff Libtiff	Version 3.7.0 beta2
Libtiff Libtiff	Version 3.7.0 beta
Libtiff Libtiff	Version 3.7.1
Libtiff Libtiff	Version 3.7.2
Libtiff Libtiff	Version 3.7.3
Libtiff Libtiff	Version 3.7.4
Libtiff Libtiff	Version 3.8.0
Libtiff Libtiff	Version 3.8.1
Libtiff Libtiff	Version 3.8.2
Libtiff Libtiff	Version 3.9.0
Libtiff Libtiff	Version 3.9.0 beta
Libtiff Libtiff	Version 3.9.1
Libtiff Libtiff	Version 3.9