CVE-2006-3460

高 7.5CVE-2006-3460 · 03/08/2006 公開 · 16/06/2026 更新

要点

CVE-2006-3460 は libtiff (libtiff) に影響する深刻度「高」 (CVSS 7.5) の脆弱性です。
今後30日間に悪用される確率（EPSS）：4.4%（全脆弱性の 91.4% より高い）。
修正版の情報はまだありません。参考情報のベンダー勧告を確認してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
libtiff libtiff	`≤ 3.8.1`	修正版なし

概要

Heap-based buffer overflow in the JPEG decoder in the TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an encoded JPEG stream that is longer than the scan line size (TiffScanLineSize).

参考情報

patches.sgi.com/support/free/security/advisories/20060801-01-P
patches.sgi.com/support/free/security/advisories/20060901-01-P.asc
lwn.net/Alerts/194228
secunia.com/advisories/21274 · Vendor Advisory
secunia.com/advisories/21290 · Vendor Advisory
secunia.com/advisories/21304 · Vendor Advisory
secunia.com/advisories/21319 · Vendor Advisory
secunia.com/advisories/21334 · Vendor Advisory
secunia.com/advisories/21338 · Vendor Advisory
secunia.com/advisories/21346 · Vendor Advisory
secunia.com/advisories/21370 · Vendor Advisory
secunia.com/advisories/21392 · Vendor Advisory
secunia.com/advisories/21501 · Vendor Advisory
secunia.com/advisories/21537 · Vendor Advisory
secunia.com/advisories/21598 · Vendor Advisory
secunia.com/advisories/21632 · Vendor Advisory
secunia.com/advisories/22036 · Vendor Advisory
secunia.com/advisories/27181 · Vendor Advisory
secunia.com/advisories/27222 · Vendor Advisory
secunia.com/advisories/27832 · Vendor Advisory
securitytracker.com/id
slackware.com/security/viewer.php
sunsolve.sun.com/search/document.do
sunsolve.sun.com/search/document.do
support.avaya.com/elmodocs2/security/ASA-2006-166.htm
debian.org/security/2006/dsa-1137 · Patch
gentoo.org/security/en/glsa/glsa-200608-07.xml
mandriva.com/security/advisories
mandriva.com/security/advisories
novell.com/linux/security/advisories/2006_44_libtiff.html
redhat.com/support/errata/RHSA-2006-0603.html · Vendor Advisory
redhat.com/support/errata/RHSA-2006-0648.html · Vendor Advisory
securityfocus.com/bid/19288
securityfocus.com/bid/19289
ubuntu.com/usn/usn-330-1
vupen.com/english/advisories/2006/3101 · Vendor Advisory
vupen.com/english/advisories/2006/3105 · Vendor Advisory
vupen.com/english/advisories/2007/3486 · Vendor Advisory
vupen.com/english/advisories/2007/4034 · Vendor Advisory
issues.rpath.com/browse/RPL-558
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11265

libtiff のその他の脆弱性

すべて見る →

これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。

無料でサイトをスキャン