CVE-2010-2482

Published: Jul 6, 2010Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

LibTIFF 3.9.4 and earlier does not properly handle an invalid td_stripbytecount field, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted TIFF file, a different vulnerability than CVE-2010-2443.

Affected (45)

Products: Libtiff: Libtiff

Libtiff

1 product

Libtiff

Configuration A

45 vulnerable

Vulnerable Software	Affected Versions
Libtiff Libtiff	Up to 3.9.4
Libtiff Libtiff	Version 3.4
Libtiff Libtiff	Version 3.4 beta18
Libtiff Libtiff	Version 3.4 beta24
Libtiff Libtiff	Version 3.4 beta28
Libtiff Libtiff	Version 3.4 beta29
Libtiff Libtiff	Version 3.4 beta31
Libtiff Libtiff	Version 3.4 beta32
Libtiff Libtiff	Version 3.4 beta34
Libtiff Libtiff	Version 3.4 beta35
Libtiff Libtiff	Version 3.4 beta36
Libtiff Libtiff	Version 3.4 beta37
Libtiff Libtiff	Version 3.5.1
Libtiff Libtiff	Version 3.5.2
Libtiff Libtiff	Version 3.5.3
Libtiff Libtiff	Version 3.5.4
Libtiff Libtiff	Version 3.5.5
Libtiff Libtiff	Version 3.5.6
Libtiff Libtiff	Version 3.5.6 beta
Libtiff Libtiff	Version 3.5.7
Libtiff Libtiff	Version 3.5.7 alpha2
Libtiff Libtiff	Version 3.5.7 alpha3
Libtiff Libtiff	Version 3.5.7 alpha4
Libtiff Libtiff	Version 3.5.7 alpha
Libtiff Libtiff	Version 3.5.7 beta
Libtiff Libtiff	Version 3.6.0
Libtiff Libtiff	Version 3.6.0 beta2
Libtiff Libtiff	Version 3.6.0 beta
Libtiff Libtiff	Version 3.6.1
Libtiff Libtiff	Version 3.7.0
Libtiff Libtiff	Version 3.7.0 alpha
Libtiff Libtiff	Version 3.7.0 beta2
Libtiff Libtiff	Version 3.7.0 beta
Libtiff Libtiff	Version 3.7.1
Libtiff Libtiff	Version 3.7.2
Libtiff Libtiff	Version 3.7.3
Libtiff Libtiff	Version 3.7.4
Libtiff Libtiff	Version 3.8.0
Libtiff Libtiff	Version 3.8.1
Libtiff Libtiff	Version 3.8.2
Libtiff Libtiff	Version 3.9.0
Libtiff Libtiff	Version 3.9.0 beta
Libtiff Libtiff	Version 3.9.1
Libtiff Libtiff	Version 3.9.2
Libtiff Libtiff	Version 3.9.3