CVE-2010-2630: Input Validation
The TIFFReadDirectory function in LibTIFF 3.9.0 does not properly validate the data types of codec-specific tags that have an out-of-order position in a TIFF file, which allows remote attackers to cause a denial of service (application crash) via a crafted file, a different vulnerability than CVE-2010-2481.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2630?
CVE-2010-2630 has been classified as a medium severity vulnerability due to its potential to cause denial of service.
How do I fix CVE-2010-2630?
To fix CVE-2010-2630, upgrade to a version of LibTIFF that addresses this vulnerability.
What causes the vulnerability in CVE-2010-2630?
CVE-2010-2630 is caused by improper validation of codec-specific tags leading to application crashes when handling crafted TIFF files.
Is CVE-2010-2630 exploitable remotely?
Yes, CVE-2010-2630 can be exploited remotely via specially crafted TIFF files.
What software is affected by CVE-2010-2630?
CVE-2010-2630 specifically affects LibTIFF version 3.9.0.