CVE-2006-3459

CVSS V2 High 7.5 CVSS V3 None
Description
Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow context-dependent attackers to execute arbitrary code or cause a denial of service via unspecified vectors, including a large tdir_count value in the TIFFFetchShortPair function in tif_dirread.c.
Overview
  • CVE ID
  • CVE-2006-3459
  • Assigner
  • secalert@redhat.com
  • Vulnerability Status
  • Modified
  • Published Version
  • 2006-08-03T01:04:00
  • Last Modified Date
  • 2017-10-11T01:31:02
Weakness Enumerations
CWE URL
CWE-119 http://cwe.mitre.org/data/definitions/119.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:* 1 OR 3.8.1
cpe:2.3:a:libtiff:libtiff:3.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.4:beta18:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.4:beta24:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.4:beta28:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.4:beta29:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.4:beta31:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.4:beta32:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.4:beta34:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.4:beta35:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.4:beta36:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.4:beta37:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.5.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.5.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.5.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.5.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.5.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.5.6:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.5.6:beta:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.5.7:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.5.7:alpha:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.5.7:alpha2:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.5.7:alpha3:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.5.7:alpha4:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.5.7:beta:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.6.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.6.0:beta:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.6.0:beta2:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.6.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.7.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.7.0:alpha:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.7.0:beta:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.7.0:beta2:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.7.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.7.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.7.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.7.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:libtiff:libtiff:3.8.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:adobe:acrobat_reader:9.3.0:*:*:*:*:*:*:* 0 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:L/Au:N/C:P/I:P/A:P
  • Access Vector
  • NETWORK
  • Access Compatibility
  • LOW
  • Authentication
  • NONE
  • Confidentiality Impact
  • PARTIAL
  • Integrity Impact
  • PARTIAL
  • Availability Impact
  • PARTIAL
  • Base Score
  • 7.5
  • Severity
  • HIGH
  • Exploitability Score
  • 10
  • Impact Score
  • 6.4
References
Reference URL Reference Tags
http://www.debian.org/security/2006/dsa-1137 Patch Vendor Advisory
http://secunia.com/advisories/21253 Vendor Advisory
https://issues.rpath.com/browse/RPL-558
http://www.redhat.com/support/errata/RHSA-2006-0603.html
http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml
http://www.novell.com/linux/security/advisories/2006_44_libtiff.html
http://www.ubuntu.com/usn/usn-330-1
http://secunia.com/advisories/21370 Vendor Advisory
http://secunia.com/advisories/21274 Vendor Advisory
http://secunia.com/advisories/21290
http://secunia.com/advisories/21334 Vendor Advisory
http://secunia.com/advisories/21392 Vendor Advisory
http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm
http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html
http://www.securityfocus.com/bid/19283
http://www.osvdb.org/27723
http://securitytracker.com/id?1016628
http://securitytracker.com/id?1016671
http://secunia.com/advisories/21501 Vendor Advisory
http://secunia.com/advisories/21537 Vendor Advisory
http://www.securityfocus.com/bid/19289
http://www.redhat.com/support/errata/RHSA-2006-0648.html
http://secunia.com/advisories/21632 Vendor Advisory
ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P
http://secunia.com/advisories/21598 Vendor Advisory
ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc
http://secunia.com/advisories/22036 Vendor Advisory
http://lwn.net/Alerts/194228/
http://www.us-cert.gov/cas/techalerts/TA06-214A.html US Government Resource
http://secunia.com/advisories/21304 Vendor Advisory
http://secunia.com/advisories/21319 Vendor Advisory
http://secunia.com/advisories/21338 Vendor Advisory
http://secunia.com/advisories/21346 Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2006:136
http://www.mandriva.com/security/advisories?name=MDKSA-2006:137
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1
http://secunia.com/advisories/27181 Vendor Advisory
http://secunia.com/advisories/27222 Vendor Advisory
http://secunia.com/advisories/27832 Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1
http://secunia.com/blog/76 Vendor Advisory
http://www.vupen.com/english/advisories/2007/4034 Vendor Advisory
http://www.vupen.com/english/advisories/2006/3101
http://www.vupen.com/english/advisories/2006/3105 Vendor Advisory
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.536600
http://www.vupen.com/english/advisories/2007/3486 Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11497
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2006-3459
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3459
History
Created Old Value New Value Data Type Notes
2022-05-10 18:59:35 Added to TrackCVE