CVE-2006-2026

Опубликовано: 25 апр. 2006

Источник: nvd

CVSS2: 6.5

EPSS Средний

Описание

Double free vulnerability in tif_jpeg.c in libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image that triggers errors related to "setfield/getfield methods in cleanup functions."

Ссылки

ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc
http://bugzilla.remotesensing.org/show_bug.cgi?id=1102
Exploit
Patch
http://secunia.com/advisories/19838
Vendor Advisory
http://secunia.com/advisories/19897
Vendor Advisory
http://secunia.com/advisories/19936
Vendor Advisory
http://secunia.com/advisories/19949
Vendor Advisory
http://secunia.com/advisories/19964
Vendor Advisory
http://secunia.com/advisories/20021
Vendor Advisory
http://secunia.com/advisories/20023
Vendor Advisory
http://secunia.com/advisories/20210
Vendor Advisory
http://secunia.com/advisories/20345
Vendor Advisory
http://secunia.com/advisories/20667
Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103099-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201332-1
http://support.avaya.com/elmodocs2/security/ASA-2006-119.htm
http://www.debian.org/security/2006/dsa-1054
http://www.gentoo.org/security/en/glsa/glsa-200605-17.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2006:082
http://www.novell.com/linux/security/advisories/2006_04_28.html
http://www.redhat.com/support/errata/RHSA-2006-0425.html

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*

Версия до 3.8.0 (включая)

cpe:2.3:a:libtiff:libtiff:3.4:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.5.1:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.5.2:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.5.3:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.5.4:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.5.5:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.5.6:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.5.7:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.6.0:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.6.1:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.7.0:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.7.1:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.10278

Средний

6.5 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2006-2026

ubuntu

больше 19 лет назад

CVE-2006-2026

redhat

больше 19 лет назад

CVE-2006-2026

debian

больше 19 лет назад

Double free vulnerability in tif_jpeg.c in libtiff before 3.8.1 allows ...

GHSA-vcfg-6cwj-xppm

github

больше 3 лет назад

BDU:2015-00788

fstec

больше 10 лет назад

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 93%

0.10278

Средний

6.5 Medium

CVSS2

Дефекты

CWE-119