CVE-2010-2631 PUBLISHED CVSS 4.300000190734863 MEDIUM

LibTIFF 3.9.0 ignores tags in certain situations during the first stage of TIFF file processing and does not properly handle this during the second stage, which allows remote attackers to cause a denial of service (application crash) via a crafted file, a different vulnerability than CVE-2010-2481.

EPSS 5.37% · 90.0th percentile

Risk Scores

CVSS v2.0
4.300000190734863
EPSS Score
5.37%
90.0th percentile

Affected Products

VendorProductVersions
libtifflibtiff3.9.0
n/an/an/a

Timeline

References

Open in Interactive Console →