Published: 01/05/2006 Updated: 03/10/2018

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

VMScore: 187

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P

The TIFFToRGB function in libtiff prior to 3.8.1 allows remote malicious users to cause a denial of service (crash) via a crafted TIFF image with Yr/Yg/Yb values that exceed the YCR/YCG/YCB values, which triggers an out-of-bounds read.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libtiff libtiff 3.8.1

Debian Bug report logs - #366588 CVE-2006-2120: denial of service (crash) via a crafted TIFF image Package: libtiff4; Maintainer for libtiff4 is (unknown); Reported by: Stefan Fritsch <sf@sfritschde> Date: Tue, 9 May 2006 19:33:04 UTC Severity: grave Tags: security Found in version libtiff4/372-3sarge1 Fixed in versio ...

Tavis Ormandy and Andrey Kiselev discovered that libtiff did not sufficiently verify the validity of TIFF files By tricking an user into opening a specially crafted TIFF file with any application that uses libtiff, an attacker could exploit this to crash the application or even execute arbitrary code with the application’s privileges ...

Andrey Kiselev discovered a problem in the TIFF library that may allow an attacker with a specially crafted TIFF image with Yr/Yg/Yb values that exceed the YCR/YCG/YCB values to crash the library and hence the surrounding application The old stable distribution (woody) is not affected by this problem For the stable distribution (sarge) this probl ...

NVD-CWE-Other http://bugzilla.remotesensing.org/show_bug.cgi?id=1065 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189974 http://www.securityfocus.com/bid/17809 http://secunia.com/advisories/19936 http://secunia.com/advisories/19949 http://www.trustix.org/errata/2006/0024 http://secunia.com/advisories/19964 http://www.redhat.com/support/errata/RHSA-2006-0425.html http://secunia.com/advisories/20023 http://www.debian.org/security/2006/dsa-1078 http://secunia.com/advisories/20330 http://support.avaya.com/elmodocs2/security/ASA-2006-119.htm ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc http://secunia.com/advisories/20210 http://secunia.com/advisories/20667 http://www.mandriva.com/security/advisories?name=MDKSA-2006:082 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9572 https://usn.ubuntu.com/277-1/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=366588 https://usn.ubuntu.com/277-1/https://nvd.nist.gov

CVE-2006-2120

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect