CVE-2010-2597 PUBLISHED CVSS 4.300000190734863 MEDIUM

The TIFFVStripSize function in tif_strip.c in LibTIFF 3.9.0 and 3.9.2 makes incorrect calls to the TIFFGetField function, which allows remote attackers to cause a denial of service (application crash) via a crafted TIFF image, related to "downsampled OJPEG input" and possibly related to a compiler optimization that triggers a divide-by-zero error.

EPSS 1.44% · 80.6th percentile

Risk Scores

CVSS v2.0
4.300000190734863
EPSS Score
1.44%
80.6th percentile

Affected Products

VendorProductVersions
n/an/an/a
libtifflibtiff3.9.0, 3.9.2

Timeline

References

Open in Interactive Console →