CVE-2006-3459
high · 7.5Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow context-dependent attackers to execute arbitrary code or cause a denial of service via unspecified vectors, including a large tdir_count value in the TIFFFetchShortPair function in tif_dirread.c.
7.5
CVSS
53.7%
EPSS (exploit prob.)
99th
EPSS percentile
2006-08-03
Published
AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-119
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| libtiff | libtiff | <= 3.8.1 |
| libtiff | libtiff | 3.4 |
| libtiff | libtiff | 3.4 |
| libtiff | libtiff | 3.4 |
| libtiff | libtiff | 3.4 |
| libtiff | libtiff | 3.4 |
| libtiff | libtiff | 3.4 |
| libtiff | libtiff | 3.4 |
| libtiff | libtiff | 3.4 |
| libtiff | libtiff | 3.4 |
| libtiff | libtiff | 3.4 |
| libtiff | libtiff | 3.4 |
| libtiff | libtiff | 3.5.1 |
| libtiff | libtiff | 3.5.2 |
| libtiff | libtiff | 3.5.3 |
| libtiff | libtiff | 3.5.4 |
| libtiff | libtiff | 3.5.5 |
| libtiff | libtiff | 3.5.6 |
| libtiff | libtiff | 3.5.6 |
| libtiff | libtiff | 3.5.7 |
| libtiff | libtiff | 3.5.7 |
| libtiff | libtiff | 3.5.7 |
| libtiff | libtiff | 3.5.7 |
| libtiff | libtiff | 3.5.7 |
| libtiff | libtiff | 3.5.7 |
| libtiff | libtiff | 3.6.0 |
| libtiff | libtiff | 3.6.0 |
| libtiff | libtiff | 3.6.0 |
| libtiff | libtiff | 3.6.1 |
| libtiff | libtiff | 3.7.0 |
| libtiff | libtiff | 3.7.0 |
| libtiff | libtiff | 3.7.0 |
| libtiff | libtiff | 3.7.0 |
| libtiff | libtiff | 3.7.1 |
| libtiff | libtiff | 3.7.2 |
| libtiff | libtiff | 3.7.3 |
| libtiff | libtiff | 3.7.4 |
| libtiff | libtiff | 3.8.0 |
| adobe | acrobat_reader | 9.3.0 |
Check a specific version with /api/v1/cve/match.
References
- ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P
- ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc
- http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html
- http://lwn.net/Alerts/194228/
- http://secunia.com/advisories/21253
- http://secunia.com/advisories/21274
- http://secunia.com/advisories/21290
- http://secunia.com/advisories/21304
- http://secunia.com/advisories/21319
- http://secunia.com/advisories/21334
- http://secunia.com/advisories/21338
- http://secunia.com/advisories/21346
- http://secunia.com/advisories/21370
- http://secunia.com/advisories/21392
- http://secunia.com/advisories/21501
- http://secunia.com/advisories/21537
- http://secunia.com/advisories/21598
- http://secunia.com/advisories/21632
- http://secunia.com/advisories/22036
- http://secunia.com/advisories/27181
- http://secunia.com/advisories/27222
- http://secunia.com/advisories/27832
- http://secunia.com/blog/76
- http://securitytracker.com/id?1016628
- http://securitytracker.com/id?1016671
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2006-3459