CVE-2010-2483 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	4.3 UNKNOWN	NETWORK	MEDIUM		AV:N/AC:M/Au:N/C:N/I:N/A:P

Base Score

CVSS 3.x

EPSS Score

Percentile: 79%

Affected Products (NVD)

Vendor	Product	Version
libtiff	libtiff	3.9.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

tiff

bookworm	4.5.0-6+deb12u1 fixed
bookworm (security)	4.5.0-6+deb12u1 fixed
bullseye	4.2.0-1+deb11u5 fixed
bullseye (security)	4.2.0-1+deb11u5 fixed
sid	4.5.1+git230720-5 fixed
trixie	4.5.1+git230720-5 fixed

Ubuntu Releases

Ubuntu Product

Codename

tiff

dapper	not-affected
hardy	not-affected
jaunty	ignored
karmic	not-affected
lucid	Fixed 3.9.2-2ubuntu0.3 released
maverick	Fixed 3.9.4-2ubuntu0.1 released

Common Weakness Enumeration

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

References

http://bugzilla.maptools.org/show_bug.cgi?id=2216

http://marc.info/?l=oss-security&m=127731610612908&w=2

http://marc.info/?l=oss-security&m=127736307002102&w=2

http://marc.info/?l=oss-security&m=127738540902757&w=2

http://marc.info/?l=oss-security&m=127781315415896&w=2

http://marc.info/?l=oss-security&m=127797353202873&w=2

http://secunia.com/advisories/40422

http://secunia.com/advisories/40527

http://secunia.com/advisories/50726

http://security.gentoo.org/glsa/glsa-201209-02.xml

http://www.openwall.com/lists/oss-security/2010/06/30/22

http://www.redhat.com/support/errata/RHSA-2010-0519.html

http://www.vupen.com/english/advisories/2010/1761

https://bugs.launchpad.net/ubuntu/+source/tiff/+bug/591605

https://bugzilla.redhat.com/show_bug.cgi?id=603081