CVE-2006-3464

2006-08-0300:00:00

ubuntu.com

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.022 Low

EPSS

Percentile

89.6%

JSON

TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to
pass numeric range checks and possibly execute code, and trigger assert
errors, via large offset values in a TIFF directory that lead to an integer
overflow and other unspecified vectors involving “unchecked arithmetic
operations”.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchtiff< 3.7.4-1ubuntu3.2UNKNOWN
ubuntu6.10noarchtiff< 3.8.2-6UNKNOWN
ubuntu7.04noarchtiff< 3.8.2-6UNKNOWN