CVE-2010-1411
Multiple integer overflows in the Fax3SetupState function in tif_fax3.c in the FAX3 decoder in...
Multiple integer overflows in the Fax3SetupState function in tif_fax3.c in the FAX3 decoder in LibTIFF before 3.9.3, as used in ImageIO in Apple Mac OS X 10.5.8 and Mac OS X 10.6 before 10.6.4, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF file that triggers a heap-based buffer overflow.
Exploit likelihood
What each source reports
NVD Score used
Multiple integer overflows in the Fax3SetupState function in tif_fax3.c in the FAX3 decoder in LibTIFF before 3.9.3, as used in ImageIO in Apple Mac OS X 10.5.8 and Mac OS X 10.6 before 10.6.4, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF file that triggers a heap-based buffer overflow.
- Record
CVE-2010-1411- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Multiple integer overflows in the Fax3SetupState function in tif_fax3.c in the FAX3 decoder in LibTIFF before 3.9.3, as used in ImageIO in Apple Mac OS X 10.5.8 and Mac OS X 10.6 before 10.6.4, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF file that triggers a heap-based buffer overflow.
- Record
CVE-2010-1411- Updated
- 2026-11-02
EUVDEUVD-2010-1439 No score
Multiple integer overflows in the Fax3SetupState function in tif_fax3.c in the FAX3 decoder in LibTIFF before 3.9.3, as used in ImageIO in Apple Mac OS X 10.5.8 and Mac OS X 10.6 before 10.6.4, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF file that triggers a heap-based buffer overflow.
- Record
EUVD-2010-1439- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-83rf-qxj4-9458 No score
Multiple integer overflows in the Fax3SetupState function in tif_fax3.c in the FAX3 decoder in...
Multiple integer overflows in the Fax3SetupState function in tif_fax3.c in the FAX3 decoder in LibTIFF before 3.9.3, as used in ImageIO in Apple Mac OS X 10.5.8 and Mac OS X 10.6 before 10.6.4, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF file that triggers a heap-based buffer overflow.
- Record
GHSA-83rf-qxj4-9458- Updated
- 2026-11-02
OSV No score
Multiple integer overflows in the Fax3SetupState function in tif_fax3.c in the FAX3 decoder in LibTIFF before 3.9.3, as used in ImageIO in Apple Mac OS X 10.5.8 and Mac OS X 10.6 before 10.6.4, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF file that triggers a heap-based buffer overflow.
- Record
CVE-2010-1411- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-1411 No score
Multiple integer overflows in the Fax3SetupState function in tif_fax3.c in the FAX3 decoder in LibTIFF before 3.9.3, as used in ImageIO in Apple Mac OS X 10.5.8 and Mac OS X 10.6 before 10.6.4, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF file that triggers a heap-based buffer overflow.
- Record
DEBIAN-CVE-2010-1411- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
tiffDebian:12 |
before 3.9.4-1 | 3.9.4-1 |
tiffDebian:13 |
before 3.9.4-1 | 3.9.4-1 |
tiffDebian:14 |
before 3.9.4-1 | 3.9.4-1 |
tiffDebian:5.0 |
before 3.8.2-11.3, plus listed versions 3.8.2-113.8.2-11.2 |
3.8.2-11.3 |
libtiffRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:3.6.1-12.el4_8.5 | 0:3.6.1-12.el4_8.5 |
libtiff-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:3.6.1-12.el4_8.5 | 0:3.6.1-12.el4_8.5 |
libtiff-develRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs |
before 0:3.6.1-12.el4_8.5 | 0:3.6.1-12.el4_8.5 |
libtiffRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:3.6.1-12.el4_8.5 | 0:3.6.1-12.el4_8.5 |
libtiff-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:3.6.1-12.el4_8.5 | 0:3.6.1-12.el4_8.5 |
libtiff-develRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs |
before 0:3.6.1-12.el4_8.5 | 0:3.6.1-12.el4_8.5 |
Show 27 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libtiffRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:3.6.1-12.el4_8.5 | 0:3.6.1-12.el4_8.5 |
libtiff-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:3.6.1-12.el4_8.5 | 0:3.6.1-12.el4_8.5 |
libtiff-develRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs |
before 0:3.6.1-12.el4_8.5 | 0:3.6.1-12.el4_8.5 |
libtiffRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:3.6.1-12.el4_8.5 | 0:3.6.1-12.el4_8.5 |
libtiff-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:3.6.1-12.el4_8.5 | 0:3.6.1-12.el4_8.5 |
libtiff-develRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs |
before 0:3.6.1-12.el4_8.5 | 0:3.6.1-12.el4_8.5 |
libtiffRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:3.8.2-7.el5_5.5 | 0:3.8.2-7.el5_5.5 |
libtiff-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:3.8.2-7.el5_5.5 | 0:3.8.2-7.el5_5.5 |
libtiff-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:3.8.2-7.el5_5.5 | 0:3.8.2-7.el5_5.5 |
libtiffRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:3.8.2-7.el5_5.5 | 0:3.8.2-7.el5_5.5 |
libtiff-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:3.8.2-7.el5_5.5 | 0:3.8.2-7.el5_5.5 |
libtiff-develRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:3.8.2-7.el5_5.5 | 0:3.8.2-7.el5_5.5 |
libtiffRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:3.8.2-7.el5_5.5 | 0:3.8.2-7.el5_5.5 |
libtiff-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:3.8.2-7.el5_5.5 | 0:3.8.2-7.el5_5.5 |
libtiff-develRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:3.8.2-7.el5_5.5 | 0:3.8.2-7.el5_5.5 |
libtiffRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 0:3.5.7-34.el3 | 0:3.5.7-34.el3 |
libtiff-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 0:3.5.7-34.el3 | 0:3.5.7-34.el3 |
libtiff-develRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs |
before 0:3.5.7-34.el3 | 0:3.5.7-34.el3 |
libtiffRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 0:3.5.7-34.el3 | 0:3.5.7-34.el3 |
libtiff-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 0:3.5.7-34.el3 | 0:3.5.7-34.el3 |
libtiff-develRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs |
before 0:3.5.7-34.el3 | 0:3.5.7-34.el3 |
libtiffRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 0:3.5.7-34.el3 | 0:3.5.7-34.el3 |
libtiff-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 0:3.5.7-34.el3 | 0:3.5.7-34.el3 |
libtiff-develRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs |
before 0:3.5.7-34.el3 | 0:3.5.7-34.el3 |
libtiffRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 0:3.5.7-34.el3 | 0:3.5.7-34.el3 |
libtiff-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 0:3.5.7-34.el3 | 0:3.5.7-34.el3 |
libtiff-develRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs |
before 0:3.5.7-34.el3 | 0:3.5.7-34.el3 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | MAVProxyUser/httpfuzz-robomiller | 2020-01-20 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-1411 is a medium vulnerability (CVSS 6.8) in Apple Mac Os X, published June 17, 2010. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 12.9%, the 96th percentile. Fixed in tiff 3.9.4-1.
References
lists.apple.com/archives/security-announce/2010//Jun/msg00001.html
support.apple.com/kb/HT4220
lists.fedoraproject.org/pipermail/package-announce/2010-July/043835.html
remotesensing.org/libtiff/v3.9.3.html
secunia.com/advisories/40181
vupen.com/english/advisories/2010/1481
Show 60 moreShow less
securityfocus.com/bid/40823
marc.info?l=oss-security&m=127731610612908&w=2
securitytracker.com/id?1024103
slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.596424
ubuntu.com/usn/USN-954-1
security.gentoo.org/glsa/glsa-201209-02.xml
redhat.com/support/errata/RHSA-2010-0520.html
lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
bugzilla.redhat.com/show_bug.cgi?id=592361
nvd.nist.gov/vuln/detail/CVE-2010-1411
github.com/advisories/GHSA-83rf-qxj4-9458
security-tracker.debian.org/tracker/CVE-2010-1411
access.redhat.com/errata/RHSA-2010:0519
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0519.json
cve.org/CVERecord?id=CVE-2010-1411