LibTIFF Unknown Tag Second Pass Processing Remote Denial of Service Vulnerability
BID:41477
Info
LibTIFF Unknown Tag Second Pass Processing Remote Denial of Service Vulnerability
| Bugtraq ID: | 41477 |
| Class: | Design Error |
| CVE: |
CVE-2010-2631 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 14 2010 12:00AM |
| Updated: | Jun 14 2010 12:00AM |
| Credit: | Tom Lane |
| Vulnerable: |
LibTIFF LibTIFF 3.9.4 LibTIFF LibTIFF 3.9.3 LibTIFF LibTIFF 3.9.2 LibTIFF LibTIFF 3.8.2 LibTIFF LibTIFF 3.8.1 LibTIFF LibTIFF 3.8 LibTIFF LibTIFF 3.7.4 LibTIFF LibTIFF 3.7.3 LibTIFF LibTIFF 3.7.2 LibTIFF LibTIFF 3.7.1 LibTIFF LibTIFF 3.7 LibTIFF LibTIFF 3.6.1 LibTIFF LibTIFF 3.6 .0 LibTIFF LibTIFF 3.5.7 LibTIFF LibTIFF 3.5.5 LibTIFF LibTIFF 3.5.4 LibTIFF LibTIFF 3.5.3 LibTIFF LibTIFF 3.5.2 LibTIFF LibTIFF 3.5.1 LibTIFF LibTIFF 3.4 LibTIFF LibTIFF 3.9 LibTIFF LibTIFF 3.7.2-7 |
| Not Vulnerable: | |
Discussion
LibTIFF Unknown Tag Second Pass Processing Remote Denial of Service Vulnerability
LibTIFF is prone to a denial-of-service vulnerability because it fails to properly validate user-supplied input.
An attacker can exploit this issue to crash an application that uses the vulnerable library, denying service to legitimate users.
LibTIFF is prone to a denial-of-service vulnerability because it fails to properly validate user-supplied input.
An attacker can exploit this issue to crash an application that uses the vulnerable library, denying service to legitimate users.
Exploit / POC
LibTIFF Unknown Tag Second Pass Processing Remote Denial of Service Vulnerability
The following TIFF file is available:
The following TIFF file is available:
Solution / Fix
LibTIFF Unknown Tag Second Pass Processing Remote Denial of Service Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
LibTIFF Unknown Tag Second Pass Processing Remote Denial of Service Vulnerability
References:
References: