Unrated severityNVD Advisory· Published Jul 2, 2010· Updated Jun 16, 2026
CVE-2010-2597
CVE-2010-2597
Description
The TIFFVStripSize function in tif_strip.c in LibTIFF 3.9.0 and 3.9.2 makes incorrect calls to the TIFFGetField function, which allows remote attackers to cause a denial of service (application crash) via a crafted TIFF image, related to "downsampled OJPEG input" and possibly related to a compiler optimization that triggers a divide-by-zero error.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
11- bugzilla.redhat.com/show_bug.cginvdPatch
- bugzilla.redhat.com/show_bug.cginvdExploit
- bugzilla.maptools.org/show_bug.cginvd
- secunia.com/advisories/40422nvd
- secunia.com/advisories/40527nvd
- secunia.com/advisories/50726nvd
- security.gentoo.org/glsa/glsa-201209-02.xmlnvd
- www.debian.org/security/2012/dsa-2552nvd
- www.redhat.com/support/errata/RHSA-2010-0519.htmlnvd
- www.vupen.com/english/advisories/2010/1761nvd
- bugs.launchpad.net/bugs/593067nvd
News mentions
0No linked articles in our index yet.