Multiple integer overflows in the Fax3SetupState function in tif_fax3.c in the FAX3 decoder in LibTIFF before 3.9.3, as used in ImageIO in Apple Mac OS X 10.5.8 and Mac OS X 10.6 before 10.6.4, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF file that triggers a heap-based buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Itunes | — | Upgrade Apple iTunes to the latest version | Jan 3, 2012 | Jun 17, 2010 |
| Apple Osx Imageio | — | Upgrade macOS to the latest versionApply OS X security update 2010-004 | Dec 16, 2011 | Jun 17, 2010 |
| Apple Safari | — | Upgrade to Apple Safari version 4.1Upgrade to Apple Safari version 5.0Uninstall Apple Safari on Windows | Jan 5, 2012 | Jun 17, 2010 |
| Centos_linux | — | Upgrade libtiff-develUpgrade libtiff | Dec 1, 2016 | Jun 17, 2010 |
| Debian | — | Upgrade tiff | Jul 30, 2024 | Jun 17, 2010 |
| Freebsd | — | Upgrade tiffUpgrade linux-tiff | Dec 10, 2025 | Jun 12, 2010 |
| Gentoo Linux | — | Upgrade media-libs/tiff. | Oct 30, 2017 | Jun 17, 2010 |
| Oracle_linux | — | Upgrade libtiff-develUpgrade libtiff | Oct 16, 2024 | Jun 17, 2010 |
| Suse | — | Upgrade libtiff3-32bitUpgrade libtiff-devel-32bitUpgrade tiffUpgrade libtiff-develUpgrade libtiff3Upgrade libtiff3-x86 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libtiff4 | Nov 8, 2024 | Jun 17, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub