Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-yq53-171e-nye4

Summary Multiple integer overflows in the Fax3SetupState function in tif_fax3.c in the FAX3 decoder in LibTIFF before 3.9.3, as used in ImageIO in Apple Mac OS X 10.5.8 and Mac OS X 10.6 before 10.6.4, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF file that triggers a heap-based buffer overflow.

Aliases

alias	CVE-2010-1411

Fixed_packages

url	pkg:deb/debian/tiff@3.9.4-1?distro=trixie
purl	pkg:deb/debian/tiff@3.9.4-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/tiff@3.9.4-1%3Fdistro=trixie

url pkg:deb/debian/tiff@4.2.0-1%2Bdeb11u5?distro=trixie

purl pkg:deb/debian/tiff@4.2.0-1%2Bdeb11u5?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5qdp-vzrd-uqgc

vulnerability	VCID-5zvp-ysut-juep

vulnerability	VCID-6hf4-rc1a-pbg6

vulnerability	VCID-6v96-k8cs-13f7

vulnerability	VCID-92dt-g6m8-fufk

vulnerability	VCID-anfx-xj8v-kfg8

vulnerability	VCID-c7nt-5d64-kkev

vulnerability	VCID-d52s-g5c7-qka3

vulnerability	VCID-fbks-9s7e-wfcj

vulnerability	VCID-gyvd-4m8g-jkdu

vulnerability	VCID-hhgz-j76b-k7d4

vulnerability	VCID-kxdc-8rht-vfdy

vulnerability	VCID-n3p5-9ykg-sufd

vulnerability	VCID-nwgs-pqj7-xkbs

vulnerability	VCID-su9v-ewt3-6ua8

vulnerability	VCID-xg35-8jbc-wqa4

vulnerability	VCID-xms6-c2j7-hfh8

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tiff@4.2.0-1%252Bdeb11u5%3Fdistro=trixie

url pkg:deb/debian/tiff@4.5.0-6%2Bdeb12u4?distro=trixie

purl pkg:deb/debian/tiff@4.5.0-6%2Bdeb12u4?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5qdp-vzrd-uqgc

vulnerability	VCID-5zvp-ysut-juep

vulnerability	VCID-6hf4-rc1a-pbg6

vulnerability	VCID-6v96-k8cs-13f7

vulnerability	VCID-92dt-g6m8-fufk

vulnerability	VCID-c7nt-5d64-kkev

vulnerability	VCID-cpk7-uyvf-3kb6

vulnerability	VCID-d52s-g5c7-qka3

vulnerability	VCID-fbks-9s7e-wfcj

vulnerability	VCID-gyvd-4m8g-jkdu

vulnerability	VCID-kxdc-8rht-vfdy

vulnerability	VCID-n3p5-9ykg-sufd

vulnerability	VCID-nwgs-pqj7-xkbs

vulnerability	VCID-su9v-ewt3-6ua8

vulnerability	VCID-xg35-8jbc-wqa4

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tiff@4.5.0-6%252Bdeb12u4%3Fdistro=trixie

url pkg:deb/debian/tiff@4.7.0-3%2Bdeb13u2?distro=trixie

purl pkg:deb/debian/tiff@4.7.0-3%2Bdeb13u2?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5qdp-vzrd-uqgc

vulnerability	VCID-6hf4-rc1a-pbg6

vulnerability	VCID-92dt-g6m8-fufk

vulnerability	VCID-fbks-9s7e-wfcj

vulnerability	VCID-n3p5-9ykg-sufd

vulnerability	VCID-su9v-ewt3-6ua8

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tiff@4.7.0-3%252Bdeb13u2%3Fdistro=trixie

url	pkg:deb/debian/tiff@4.7.1-2?distro=trixie
purl	pkg:deb/debian/tiff@4.7.1-2?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/tiff@4.7.1-2%3Fdistro=trixie

url	pkg:ebuild/media-libs/tiff@4.0.2-r1
purl	pkg:ebuild/media-libs/tiff@4.0.2-r1
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:ebuild/media-libs/tiff@4.0.2-r1

Affected_packages

url pkg:rpm/redhat/libtiff@3.5.7-34?arch=el3

purl pkg:rpm/redhat/libtiff@3.5.7-34?arch=el3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-hcaj-3gt6-c7hg

vulnerability	VCID-yq53-171e-nye4

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/libtiff@3.5.7-34%3Farch=el3

url pkg:rpm/redhat/libtiff@3.6.1-12.el4_8?arch=5

purl pkg:rpm/redhat/libtiff@3.6.1-12.el4_8?arch=5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-bqku-p44f-pbda

vulnerability	VCID-hzgv-brm9-akdh

vulnerability	VCID-jpv7-hgwm-pyh9

vulnerability	VCID-kc84-s4s8-t3d2

vulnerability	VCID-mn52-n2fv-hfds

vulnerability	VCID-yq53-171e-nye4

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/libtiff@3.6.1-12.el4_8%3Farch=5

url pkg:rpm/redhat/libtiff@3.8.2-7.el5_5?arch=5

purl pkg:rpm/redhat/libtiff@3.8.2-7.el5_5?arch=5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-bqku-p44f-pbda

vulnerability	VCID-hzgv-brm9-akdh

vulnerability	VCID-jpv7-hgwm-pyh9

vulnerability	VCID-kc84-s4s8-t3d2

vulnerability	VCID-mn52-n2fv-hfds

vulnerability	VCID-yq53-171e-nye4

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/libtiff@3.8.2-7.el5_5%3Farch=5

References

reference_url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1411.json
reference_id
reference_type
scores
url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1411.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2010-1411

reference_id

reference_type

scores

value	0.00745
scoring_system	epss
scoring_elements	0.73403
published_at	2026-06-04T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2010-1411

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=592361
reference_id	592361
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=592361

reference_url	https://security.gentoo.org/glsa/201209-02
reference_id	GLSA-201209-02
reference_type
scores
url	https://security.gentoo.org/glsa/201209-02

reference_url	https://access.redhat.com/errata/RHSA-2010:0519
reference_id	RHSA-2010:0519
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2010:0519

reference_url	https://access.redhat.com/errata/RHSA-2010:0520
reference_id	RHSA-2010:0520
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2010:0520

Weaknesses

cwe_id	190
name	Integer Overflow or Wraparound
description	The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control.

Exploits

Severity_range_score null

Exploitability 0.5

Weighted_severity 0.0

Risk_score null

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yq53-171e-nye4

Vulnerability Instance