CVE-2006-3461

CAO 7.5CVE-2006-3461 · Công bố 03/08/2006 · cập nhật 16/06/2026

Tóm tắt nhanh

CVE-2006-3461 là lỗ hổng mức CAO (CVSS 7.5) ảnh hưởng libtiff (libtiff).
Xác suất bị khai thác trong 30 ngày tới (EPSS): 5.3%, cao hơn 92.6% các lỗ hổng khác.
Chưa có phiên bản vá trong dữ liệu: theo dõi khuyến cáo của nhà cung cấp ở phần Tham khảo.

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
libtiff libtiff	`≤ 3.8.1`	Chưa có bản vá

Mô tả

Heap-based buffer overflow in the PixarLog decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors.

Tham khảo

patches.sgi.com/support/free/security/advisories/20060801-01-P
patches.sgi.com/support/free/security/advisories/20060901-01-P.asc
lists.apple.com/archives/security-announce/2006//Aug/msg00000.html
lwn.net/Alerts/194228
secunia.com/advisories/21253
secunia.com/advisories/21274
secunia.com/advisories/21290
secunia.com/advisories/21304
secunia.com/advisories/21319
secunia.com/advisories/21334
secunia.com/advisories/21338
secunia.com/advisories/21346
secunia.com/advisories/21370
secunia.com/advisories/21392
secunia.com/advisories/21501
secunia.com/advisories/21537
secunia.com/advisories/21598
secunia.com/advisories/21632
secunia.com/advisories/22036
secunia.com/advisories/27181
secunia.com/advisories/27222
secunia.com/advisories/27832
securitytracker.com/id
securitytracker.com/id
slackware.com/security/viewer.php
sunsolve.sun.com/search/document.do
sunsolve.sun.com/search/document.do
support.avaya.com/elmodocs2/security/ASA-2006-166.htm
debian.org/security/2006/dsa-1137 · Patch
gentoo.org/security/en/glsa/glsa-200608-07.xml
mandriva.com/security/advisories
novell.com/linux/security/advisories/2006_44_libtiff.html
osvdb.org/27725
redhat.com/support/errata/RHSA-2006-0603.html
redhat.com/support/errata/RHSA-2006-0648.html
securityfocus.com/bid/19289
securityfocus.com/bid/19290
ubuntu.com/usn/usn-330-1
us-cert.gov/cas/techalerts/TA06-214A.html · US Government Resource
vupen.com/english/advisories/2006/3101
vupen.com/english/advisories/2006/3105
vupen.com/english/advisories/2007/3486
vupen.com/english/advisories/2007/4034
issues.rpath.com/browse/RPL-558
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9910

Lỗ hổng khác của libtiff

Xem tất cả →

Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.

Quét site miễn phí