CVE-2010-4665

Name	CVE-2010-4665
Description	Integer overflow in the ReadDirectory function in tiffdump.c in tiffdump in LibTIFF before 3.9.5 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TIFF file containing a directory data structure with many directory entries.
Source	CVE (at NVD; oss-sec, fulldisc, OSVDB, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SuSE, Mageia, more)
References	DSA-2552-1
NVD severity	medium (attack range: remote, user-initiated)
Debian/oldstable	not vulnerable.
Debian/stable	not vulnerable.
Debian/testing	not vulnerable.
Debian/unstable	not vulnerable.

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
tiff (PTS)	squeeze (security), squeeze	3.9.4-5+squeeze10	fixed
	squeeze (lts)	3.9.4-5+squeeze11	fixed
	wheezy, wheezy (security)	4.0.2-6+deb7u3	fixed
	jessie, sid	4.0.3-12.1	fixed
tiff3 (PTS)	wheezy	3.9.6-11	fixed

The information above is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin
tiff	source	(unstable)	(not affected)
tiff	source	squeeze	3.9.4-5+squeeze5	medium	DSA-2552-1
tiff3	source	(unstable)	3.9.5	medium

- tiff <not-affected> (vulnerable code not present)