CVE-2006-3462
Heap-based buffer overflow in the NeXT RLE decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors involving decoding large RLE images.
- Score
- CVSS 2.0 7.5 High
- Status
- Modified - secalert@redhat.com
- Published
- 2006-08-03
- Last modified
- 2024-08-07
- Weaknesses
- CWE-119
Affected products
References
- http://docs.info.apple.com/article.html?artnum=304063
- http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html
- http://lwn.net/Alerts/194228/
- http://secunia.com/advisories/21253
- http://secunia.com/advisories/21274
- http://secunia.com/advisories/21290
- http://secunia.com/advisories/21304
- http://secunia.com/advisories/21319
- http://secunia.com/advisories/21334
- http://secunia.com/advisories/21338
- http://secunia.com/advisories/21346
- http://secunia.com/advisories/21370
- http://secunia.com/advisories/21392
- http://secunia.com/advisories/21501
- http://secunia.com/advisories/21537
- http://secunia.com/advisories/21598
- http://secunia.com/advisories/21632
- http://secunia.com/advisories/22036
- http://secunia.com/advisories/27181
- http://secunia.com/advisories/27222
- http://secunia.com/advisories/27832
- http://securitytracker.com/id?1016628
- http://securitytracker.com/id?1016671
- http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.536600
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1
- http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm
- http://www.debian.org/security/2006/dsa-1137
