VULNERABILITY INTELLIGENCE
CVE-2010-2233
CVSS score7.5 HIGH
EPSS probability4.50%
CISA KEVNot currently listed
Published2010-07-02
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
tif_getimage.c in LibTIFF 3.9.0 and 3.9.2 on 64-bit platforms, as used in ImageMagick, does not properly perform vertical flips, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TIFF image, related to "downsampled OJPEG input."
Weakness classification
- CWE-20: Improper Input Validation