CVE-2010-2067

Stack-based buffer overflow in the TIFFFetchSubjectDistance function in tif_dirread.c in LibTIFF before 3.9.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long EXIF SubjectDistance field in a TIFF file.

• CWE-119

• http://bugzilla.maptools.org/show_bug.cgi?id=2212Issue Tracking, Third Party Advisory
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=874Broken Link
• http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.htmlMailing List, Third Party Advisory
• http://marc.info/?l=oss-security&m=127731610612908&w=2Mailing List, Third Party Advisory
• http://osvdb.org/65676Broken Link
• http://secunia.com/advisories/40241Third Party Advisory
• http://secunia.com/advisories/40381Third Party Advisory
• http://secunia.com/advisories/50726Third Party Advisory
• http://security.gentoo.org/glsa/glsa-201209-02.xmlThird Party Advisory
• http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.596424Third Party Advisory
• http://www.remotesensing.org/libtiff/v3.9.4.htmlBroken Link
• http://www.ubuntu.com/usn/USN-954-1Third Party Advisory
• http://www.vupen.com/english/advisories/2010/1638Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=599576Issue Tracking, Third Party Advisory
• http://bugzilla.maptools.org/show_bug.cgi?id=2212Issue Tracking, Third Party Advisory
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=874Broken Link
• http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.htmlMailing List, Third Party Advisory
• http://marc.info/?l=oss-security&m=127731610612908&w=2Mailing List, Third Party Advisory
• http://osvdb.org/65676Broken Link
• http://secunia.com/advisories/40241Third Party Advisory
• http://secunia.com/advisories/40381Third Party Advisory
• http://secunia.com/advisories/50726Third Party Advisory
• http://security.gentoo.org/glsa/glsa-201209-02.xmlThird Party Advisory
• http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.596424Third Party Advisory
• http://www.remotesensing.org/libtiff/v3.9.4.htmlBroken Link
• http://www.ubuntu.com/usn/USN-954-1Third Party Advisory
• http://www.vupen.com/english/advisories/2010/1638Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=599576Issue Tracking, Third Party Advisory

Published

Jun 24, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-2061rpcbind 0.2.0 does not properly validate (1) /tmp/portmap.xd…7.8
• CVE-2010-2062Integer underflow in the real_get_rdt_chunk function in real…
• CVE-2010-2063Buffer overflow in the SMB1 packet chaining implementation i…
• CVE-2010-2064rpcbind 0.2.0 allows local users to write to arbitrary files…7.1
• CVE-2010-2065Integer overflow in the TIFFroundup macro in LibTIFF before …
• CVE-2010-2066The mext_check_arguments function in fs/ext4/move_extent.c i…5.5
• CVE-2010-2068mod_proxy_http.c in mod_proxy_http in the Apache HTTP Server…
• CVE-2010-2069Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2010-2070arch/ia64/xen/faults.c in Xen 3.4 and 4.0 in Linux kernel 2.…
• CVE-2010-2071The btrfs_xattr_set_acl function in fs/btrfs/acl.c in btrfs …
• CVE-2010-2072Pyftpd 0.8.4 creates log files with predictable names in a t…
• CVE-2010-2073auth_db_config.py in Pyftpd 0.8.4 contains hard-coded userna…7.5