CVE-2010-1411

Published Jun 17, 2010

Last updated 12 years ago

Overview

Description: Multiple integer overflows in the Fax3SetupState function in tif_fax3.c in the FAX3 decoder in LibTIFF before 3.9.3, as used in ImageIO in Apple Mac OS X 10.5.8 and Mac OS X 10.6 before 10.6.4, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF file that triggers a heap-based buffer overflow.
Source: product-security@apple.com
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 6.8
Impact score: 6.4
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-189

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1335E35A-D381-4056-9E78-37BC6DF8AD98"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3C69DEE9-3FA5-408E-AD27-F5E7043F852A"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D25D1FD3-C291-492C-83A7-0AFAFAADC98D"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5B565F77-C310-4B83-B098-22F9489C226C"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x:10.6.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "546EBFC8-79F0-42C2-9B9A-A76CA3F19470"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "82B4CD59-9F37-4EF0-BA43-427CFD6E1329"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "26E34E35-CCE9-42BE-9AFF-561D8AA90E25"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A04FF6EE-D4DA-4D70-B0CE-154292828531"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9425320F-D119-49EB-9265-3159070DFE93"
          },
          {
            "criteria": "cpe:2.3:o:apple:mac_os_x_server:10.6.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F6BE138D-619B-4E44-BFB2-8DFE5F0D1E12"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References