CVE-2010-3087
LibTIFF before 3.9.2-5.2.1 in SUSE openSUSE 11.3 allows remote attackers to cause a denial of...
LibTIFF before 3.9.2-5.2.1 in SUSE openSUSE 11.3 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted TIFF image.
Exploit likelihood
What each source reports
NVD Score used
LibTIFF before 3.9.2-5.2.1 in SUSE openSUSE 11.3 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted TIFF image.
- Record
CVE-2010-3087- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
LibTIFF before 3.9.2-5.2.1 in SUSE openSUSE 11.3 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted TIFF image.
- Record
CVE-2010-3087- Updated
- 2026-11-02
EUVDEUVD-2010-3088 No score
LibTIFF before 3.9.2-5.2.1 in SUSE openSUSE 11.3 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted TIFF image.
- Record
EUVD-2010-3088- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rx6q-233c-f2vp No score
LibTIFF before 3.9.2-5.2.1 in SUSE openSUSE 11.3 allows remote attackers to cause a denial of...
LibTIFF before 3.9.2-5.2.1 in SUSE openSUSE 11.3 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted TIFF image.
- Record
GHSA-rx6q-233c-f2vp- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
LibTIFF before 3.9.2-5.2.1 in SUSE openSUSE 11.3 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted TIFF image.
- Record
CVE-2010-3087- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-3087 No score
LibTIFF before 3.9.2-5.2.1 in SUSE openSUSE 11.3 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted TIFF image.
- Record
DEBIAN-CVE-2010-3087- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-3087 is a medium vulnerability (CVSS 6.8) in Libtiff, published September 28, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.24%, the 88th percentile. Fixed in tiff 3.9.4-5.
References
bugzilla.novell.com/show_bug.cgi?id=624215
blackberry.com/btsc/KB27244
security.gentoo.org/glsa/glsa-201209-02.xml
lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html
support.novell.com/security/cve/CVE-2010-3087.html
secunia.com/advisories/50726
nvd.nist.gov/vuln/detail/CVE-2010-3087
github.com/advisories/GHSA-rx6q-233c-f2vp
security-tracker.debian.org/tracker/CVE-2010-3087