CVE-2006-3459

Опубликовано: 03 авг. 2006

Источник: nvd

CVSS2: 7.5

EPSS Средний

Описание

Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow context-dependent attackers to execute arbitrary code or cause a denial of service via unspecified vectors, including a large tdir_count value in the TIFFFetchShortPair function in tif_dirread.c.

Ссылки

ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P
ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc
http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html
http://lwn.net/Alerts/194228/
http://secunia.com/advisories/21253
Vendor Advisory
http://secunia.com/advisories/21274
Vendor Advisory
http://secunia.com/advisories/21290
http://secunia.com/advisories/21304
Vendor Advisory
http://secunia.com/advisories/21319
Vendor Advisory
http://secunia.com/advisories/21334
Vendor Advisory
http://secunia.com/advisories/21338
Vendor Advisory
http://secunia.com/advisories/21346
Vendor Advisory
http://secunia.com/advisories/21370
Vendor Advisory
http://secunia.com/advisories/21392
Vendor Advisory
http://secunia.com/advisories/21501
Vendor Advisory
http://secunia.com/advisories/21537
Vendor Advisory
http://secunia.com/advisories/21598
Vendor Advisory
http://secunia.com/advisories/21632
Vendor Advisory
http://secunia.com/advisories/22036
Vendor Advisory
http://secunia.com/advisories/27181
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*

Версия до 3.8.1 (включая)

cpe:2.3:a:libtiff:libtiff:3.4:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.4:beta18:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.4:beta24:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.4:beta28:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.4:beta29:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.4:beta31:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.4:beta32:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.4:beta34:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.4:beta35:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.4:beta36:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.4:beta37:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.5.1:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.5.2:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.5.3:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.5.4:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.5.5:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.5.6:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.5.6:beta:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.5.7:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.5.7:alpha:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.5.7:alpha2:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.5.7:alpha3:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.5.7:alpha4:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.5.7:beta:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.6.0:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.6.0:beta:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.6.0:beta2:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.6.1:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.7.0:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.7.0:alpha:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.7.0:beta:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.7.0:beta2:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.7.1:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.7.2:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.7.3:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.7.4:*:*:*:*:*:*:*

cpe:2.3:a:libtiff:libtiff:3.8.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat_reader:9.3.0:*:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.66528

Средний

7.5 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2006-3459

ubuntu

около 19 лет назад

CVE-2006-3459

redhat

около 19 лет назад

CVE-2006-3459

debian

около 19 лет назад

Multiple stack-based buffer overflows in the TIFF library (libtiff) be ...

GHSA-m9p7-26x3-qmg3

github

больше 3 лет назад

BDU:2015-09521

fstec

около 19 лет назад

Уязвимости операционной системы Gentoo Linux, позволяющие удаленному злоумышленнику нарушить доступность защищаемой информации

EPSS

Процентиль: 98%

0.66528

Средний

7.5 High

CVSS2

Дефекты

CWE-119