CVE-2010-2065

Publication date 13 June 2010

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Integer overflow in the TIFFroundup macro in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TIFF file that triggers a buffer overflow.

Read the notes from the security team

Status

Package Ubuntu Release Status
tiff 10.04 LTS lucid
Fixed 3.9.2-2ubuntu0.3
9.10 karmic
Not affected
9.04 jaunty
Not affected
8.04 LTS hardy
Not affected
6.06 LTS dapper
Not affected

Notes

kees

only 3.9.x is vulnerable

References

Related Ubuntu Security Notices (USN)

    • USN-954-1
    • tiff vulnerabilities
    • 21 June 2010

Other references