CVE-2010-2598

LibTIFF in Red Hat Enterprise Linux (RHEL) 3 on x86_64 platforms, as used in tiff2rgba, attempts to process image data even when the required compression functionality is not configured, which allows remote attackers to cause a denial of service via a crafted TIFF image, related to "downsampled OJPEG input."

• CWE-20

• http://secunia.com/advisories/40536Permissions Required, Third Party Advisory
• http://www.redhat.com/support/errata/RHSA-2010-0520.htmlNot Applicable
• http://www.vupen.com/english/advisories/2010/1761Broken Link
• https://bugzilla.redhat.com/show_bug.cgi?id=583081Exploit
• http://secunia.com/advisories/40536Permissions Required, Third Party Advisory
• http://www.redhat.com/support/errata/RHSA-2010-0520.htmlNot Applicable
• http://www.vupen.com/english/advisories/2010/1761Broken Link
• https://bugzilla.redhat.com/show_bug.cgi?id=583081Exploit

Published

Jul 2, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-2589Integer overflow in the dirapi.dll module in Adobe Shockwave…
• CVE-2010-2590Heap-based buffer overflow in the CrystalReports12.CrystalPr…
• CVE-2010-2594Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2010-2595The TIFFYCbCrtoRGB function in LibTIFF 3.9.0 and 3.9.2, as u…
• CVE-2010-2596The OJPEGPostDecode function in tif_ojpeg.c in LibTIFF 3.9.0…
• CVE-2010-2597The TIFFVStripSize function in tif_strip.c in LibTIFF 3.9.0 …
• CVE-2010-2599Unspecified vulnerability in Research In Motion (RIM) BlackB…
• CVE-2010-2600Untrusted search path vulnerability in BlackBerry Desktop So…
• CVE-2010-2601Multiple buffer overflows in the PDF distiller in the Attach…
• CVE-2010-2602Multiple buffer overflows in the PDF distiller component in …
• CVE-2010-2603RIM BlackBerry Desktop Software 4.7 through 6.0 for PC, and …
• CVE-2010-2604Multiple buffer overflows in the PDF Distiller in the BlackB…