CVE-2010-2233: Input Validation
First published: Wed Jun 23 2010(Updated: )
A flaw was found in a way libtiff handled vertically flipped (i.e. with negative toskew) images on 64bit platforms. Numeric computation used to calculate buffer pointer was done in the way that incorrectly extended from 32bit type to 64bit, resulting in out-of-bounds writes. For more details, refer to following bugs: <a href="http://bugzilla.maptools.org/show_bug.cgi?id=2207">http://bugzilla.maptools.org/show_bug.cgi?id=2207</a> <a class="bz_bug_link bz_status_CLOSED bz_closed bz_public " title="CLOSED WONTFIX - Assorted libtiff failures on downsampled OJPEG input" href="show_bug.cgi?id=583081">https://bugzilla.redhat.com/show_bug.cgi?id=583081</a>
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Libtiff Libtiff | =3.9.2 | |
| Libtiff Libtiff | =3.9.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.remotesensing.org/libtiff/v3.9.4.html
- http://securitytracker.com/id?1024150
- http://bugzilla.maptools.org/show_bug.cgi?id=2207
- https://bugzilla.redhat.com/show_bug.cgi?id=583081
- https://bugzilla.redhat.com/show_bug.cgi?id=607198
- http://marc.info/?l=oss-security&m=127731610612908&w=2
- http://secunia.com/advisories/40422
- http://secunia.com/advisories/50726
- http://security.gentoo.org/glsa/glsa-201209-02.xml
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=583081
- http://admin.fedoraproject.org/updates/libtiff-3.9.4-1.fc12
- http://admin.fedoraproject.org/updates/libtiff-3.9.4-1.fc13
- collector/nvd-historical
- collector/nvd-index
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/author
- agent/references
- agent/weakness
- agent/tags
- agent/description
- agent/event
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2010-2233
- vendor/libtiff
- canonical/libtiff libtiff
- version/libtiff libtiff/3.9.2
- version/libtiff libtiff/3.9.0