Skip to content
OpenAdvisories
Unscored DSA-2552-1 8 CVEs

tiff - several

Published Sep 26, 2012 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 tiff 3.9.4-5+squeeze5

Vulnerabilities 8

  • Unscored —
    CVE-2010-2482 Public exploit

    LibTIFF 3.9.4 and earlier does not properly handle an invalid td_stripbytecount field, which allows remote attackers to…

  • Unscored —

    The TIFFYCbCrtoRGB function in LibTIFF 3.9.0 and 3.9.2, as used in ImageMagick, does not properly handle invalid Refere…

  • Unscored —

    The TIFFVStripSize function in tif_strip.c in LibTIFF 3.9.0 and 3.9.2 makes incorrect calls to the TIFFGetField functio…

  • Unscored —
    CVE-2010-2630 Public exploit

    The TIFFReadDirectory function in LibTIFF 3.9.0 does not properly validate the data types of codec-specific tags that h…

  • Unscored —

    Integer overflow in the ReadDirectory function in tiffdump.c in tiffdump in LibTIFF before 3.9.5 allows remote attacker…

  • Unscored —

    Integer signedness error in the TIFFReadDirectory function in tif_dirread.c in libtiff 3.9.4 and earlier allows remote …

  • Unscored —

    Multiple integer overflows in tiff2pdf in libtiff before 4.0.2 allow remote attackers to cause a denial of service (app…

  • Unscored —

    The t2p_read_tiff_init function in tiff2pdf (tools/tiff2pdf.c) in LibTIFF 4.0.2 and earlier does not properly initializ…