NVD

Id
12943  
Name
CVE-2010-1411  
Description
Multiple integer overflows in the Fax3SetupState function in tif_fax3.c in the FAX3 decoder in LibTIFF before 3.9.3, as used in ImageIO in Apple Mac OS X 10.5.8 and Mac OS X 10.6 before 10.6.4, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF file that triggers a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-06-17  
Modified Date
2013-05-14  
Seq
2010-1411  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
71526 12943 CVE-2010-1411 APPLE-SA-2010-06-15-1  View
71527 12943 CVE-2010-1411 APPLE-SA-2010-06-16-1  View
71528 12943 CVE-2010-1411 FEDORA-2010-10460  View
71529 12943 CVE-2010-1411 FEDORA-2010-10469  View
71530 12943 CVE-2010-1411 SUSE-SR:2010:014  View
71531 12943 CVE-2010-1411 [oss-security] 20100623 CVE requests: LibTIFF  View
71532 12943 CVE-2010-1411 GLSA-201209-02  View
71533 12943 CVE-2010-1411 1024103  View
71534 12943 CVE-2010-1411 SSA:2010-180-02  View
71535 12943 CVE-2010-1411 http://support.apple.com/kb/HT4188  View
71536 12943 CVE-2010-1411 http://support.apple.com/kb/HT4196  View
71537 12943 CVE-2010-1411 http://support.apple.com/kb/HT4220  View
71538 12943 CVE-2010-1411 RHSA-2010:0519  View
71539 12943 CVE-2010-1411 RHSA-2010:0520  View
71540 12943 CVE-2010-1411 http://www.remotesensing.org/libtiff/v3.9.3.html  View
71541 12943 CVE-2010-1411 40823  View
71542 12943 CVE-2010-1411 USN-954-1  View
71543 12943 CVE-2010-1411 ADV-2010-1435  View
71544 12943 CVE-2010-1411 ADV-2010-1481  View
71545 12943 CVE-2010-1411 ADV-2010-1512  View
71546 12943 CVE-2010-1411 ADV-2010-1638  View
71547 12943 CVE-2010-1411 ADV-2010-1731  View
71548 12943 CVE-2010-1411 ADV-2010-1761  View
71549 12943 CVE-2010-1411 https://bugzilla.redhat.com/show_bug.cgi?id=592361  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35871 JVNDB-2010-001651 LibTIFF の FAX3 デコーダの Fax3SetupState 関数における整数オーバーフローの脆弱性 Apple Mac OS X の ImageIO で使用される LibTIFF の FAX3 デコーダにおける tif_fax3.c の Fax3SetupState 関数には、整数オーバーフローの脆弱性が存在します。 CVE-2010-1411 43991 CVE-2010-1411 12943 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001651.html 2010-06-10 2010-08-24 View