CVE-2010-2065
Integer overflow in the TIFFroundup macro in LibTIFF before 3.9.3 allows remote attackers to...
Integer overflow in the TIFFroundup macro in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TIFF file that triggers a buffer overflow.
Exploit likelihood
What each source reports
NVD Score used
Integer overflow in the TIFFroundup macro in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TIFF file that triggers a buffer overflow.
- Record
CVE-2010-2065- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Integer overflow in the TIFFroundup macro in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TIFF file that triggers a buffer overflow.
- Record
CVE-2010-2065- Updated
- 2026-11-02
EUVDEUVD-2010-2084 No score
Integer overflow in the TIFFroundup macro in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TIFF file that triggers a buffer overflow.
- Record
EUVD-2010-2084- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jgr3-673f-qm3h No score
Integer overflow in the TIFFroundup macro in LibTIFF before 3.9.3 allows remote attackers to...
Integer overflow in the TIFFroundup macro in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TIFF file that triggers a buffer overflow.
- Record
GHSA-jgr3-673f-qm3h- Updated
- 2026-11-02
OSV No score
Integer overflow in the TIFFroundup macro in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TIFF file that triggers a buffer overflow.
- Record
CVE-2010-2065- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-2065 No score
Integer overflow in the TIFFroundup macro in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TIFF file that triggers a buffer overflow.
- Record
DEBIAN-CVE-2010-2065- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10554-1 No score
libtiff-devel-32bit-4.0.7-1.1 on GA media
These are all security issues fixed in the libtiff-devel-32bit-4.0.7-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10554-1- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-2065 is a medium vulnerability (CVSS 6.8) in Libtiff, published June 23, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.57%, the 92nd percentile. Fixed in tiff 3.9.4-1.
References
secunia.com/advisories/40181
blogs.sun.com/security/entry/cve_2010_2065_cve_2010
marc.info?l=oss-security&m=127731610612908&w=2
vupen.com/english/advisories/2010/1638
slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.596424
Show 61 moreShow less
ubuntu.com/usn/USN-954-1
security.gentoo.org/glsa/glsa-201209-02.xml
remotesensing.org/libtiff/v3.9.3.html
bugzilla.redhat.com/show_bug.cgi?id=601274
bugs.launchpad.net/ubuntu/+source/tiff/+bug/589565
mandriva.com/security/advisories?name=MDVSA-2011:043
nvd.nist.gov/vuln/detail/CVE-2010-2065
github.com/advisories/GHSA-jgr3-673f-qm3h
security-tracker.debian.org/tracker/CVE-2010-2065
suse.com/security/cve/CVE-2009-2285