CVE-2010-1411: apple mac_os_x Numeric Errors
Vulnerability summary
CVE-2010-1411 is a medium (CVSS 6.8) Numeric Errors vulnerability in apple mac_os_x. EPSS estimates a 12.85% chance of exploitation in the next 30 days, higher than 96.2% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 2Timeline
- 17-06-2010PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Multiple integer overflows in the Fax3SetupState function in tif_fax3.c in the FAX3 decoder in LibTIFF before 3.9.3, as used in ImageIO in Apple Mac OS X 10.5.8 and Mac OS X 10.6 before 10.6.4, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF file that triggers a heap-based buffer overflow.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
12.85%
Chance of exploitation in the next 30 days
Percentile
96%
Versus all other CVEs
30-day change
0.00 pp
From 12.85% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Apple2 products
- mac_os_x10.5.8 | 10.6.0 | 10.6.1 | 10.6.2 | 10.6.3
- mac_os_x_server10.5.8 | 10.6.0 | 10.6.1 | 10.6.2 | 10.6.3
Debian1 product
- tiff< 3.8.2-11.3 | < 3.9.4-1
2 vendors · 3 products
References
33 links- support.apple.com/kb/HT4220X Refsource CONFIRM
- lists.fedoraproject.org/pipermail/package-announce/2010-July/043835.htmlVendor AdvisoryX Refsource FEDORA
- www.remotesensing.org/libtiff/v3.9.3.htmlX Refsource CONFIRM
Show all 33 references
- slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.596424Vendor AdvisoryX Refsource SLACKWARE
- lists.fedoraproject.org/pipermail/package-announce/2010-July/043769.htmlVendor AdvisoryX Refsource FEDORA
- bugzilla.redhat.com/show_bug.cgi?id=592361X Refsource CONFIRM
- support.apple.com/kb/HT4196X Refsource CONFIRM
