VYPR
Unrated severityNVD Advisory· Published Jul 2, 2010· Updated Apr 29, 2026

CVE-2010-2233

CVE-2010-2233

Description

tif_getimage.c in LibTIFF 3.9.0 and 3.9.2 on 64-bit platforms, as used in ImageMagick, does not properly perform vertical flips, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TIFF image, related to "downsampled OJPEG input."

Affected products

2
  • LibTIFF/Libtiff2 versions
    cpe:2.3:a:libtiff:libtiff:3.9.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:libtiff:libtiff:3.9.0:*:*:*:*:*:*:*
    • cpe:2.3:a:libtiff:libtiff:3.9.2:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

9

News mentions

0

No linked articles in our index yet.