CVE-2010-2631

Publication date 6 July 2010

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

LibTIFF 3.9.0 ignores tags in certain situations during the first stage of TIFF file processing and does not properly handle this during the second stage, which allows remote attackers to cause a denial of service (application crash) via a crafted file, a different vulnerability than CVE-2010-2481.

Read the notes from the security team

Status

Package Ubuntu Release Status
tiff 10.10 maverick
Not affected
10.04 LTS lucid
Fixed 3.9.2-2ubuntu0.3
9.10 karmic
Fixed 3.8.2-13ubuntu0.3
9.04 jaunty Ignored end of life
8.04 LTS hardy
Fixed 3.8.2-7ubuntu3.6
6.06 LTS dapper
Fixed 3.7.4-1ubuntu3.8

Notes

mdeslaur

same patch as CVE-2010-2481