CVE-2006-3462

CAO 7.5CVE-2006-3462 · Công bố 03/08/2006 · cập nhật 16/06/2026

Tóm tắt nhanh

CVE-2006-3462 là lỗ hổng mức CAO (CVSS 7.5) ảnh hưởng libtiff (libtiff).
Xác suất bị khai thác trong 30 ngày tới (EPSS): 5.3%, cao hơn 92.6% các lỗ hổng khác.
Chưa có phiên bản vá trong dữ liệu: theo dõi khuyến cáo của nhà cung cấp ở phần Tham khảo.

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
libtiff libtiff	`≤ 3.8.1`	Chưa có bản vá

Mô tả

Heap-based buffer overflow in the NeXT RLE decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors involving decoding large RLE images.

Tham khảo

patches.sgi.com/support/free/security/advisories/20060801-01-P
patches.sgi.com/support/free/security/advisories/20060901-01-P.asc
docs.info.apple.com/article.html
lists.apple.com/archives/security-announce/2006//Aug/msg00000.html
lwn.net/Alerts/194228
secunia.com/advisories/21253 · Vendor Advisory
secunia.com/advisories/21274 · Vendor Advisory
secunia.com/advisories/21290 · Vendor Advisory
secunia.com/advisories/21304 · Vendor Advisory
secunia.com/advisories/21319 · Vendor Advisory
secunia.com/advisories/21334 · Vendor Advisory
secunia.com/advisories/21338 · Vendor Advisory
secunia.com/advisories/21346 · Vendor Advisory
secunia.com/advisories/21370 · Vendor Advisory
secunia.com/advisories/21392 · Vendor Advisory
secunia.com/advisories/21501 · Vendor Advisory
secunia.com/advisories/21537 · Vendor Advisory
secunia.com/advisories/21598 · Vendor Advisory
secunia.com/advisories/21632 · Vendor Advisory
secunia.com/advisories/22036 · Vendor Advisory
secunia.com/advisories/27181 · Vendor Advisory
secunia.com/advisories/27222 · Vendor Advisory
secunia.com/advisories/27832 · Vendor Advisory
securitytracker.com/id
securitytracker.com/id
slackware.com/security/viewer.php
sunsolve.sun.com/search/document.do
sunsolve.sun.com/search/document.do
support.avaya.com/elmodocs2/security/ASA-2006-166.htm
debian.org/security/2006/dsa-1137 · Patch
gentoo.org/security/en/glsa/glsa-200608-07.xml
mandriva.com/security/advisories
mandriva.com/security/advisories
novell.com/linux/security/advisories/2006_44_libtiff.html
osvdb.org/27726
redhat.com/support/errata/RHSA-2006-0603.html · Vendor Advisory
redhat.com/support/errata/RHSA-2006-0648.html · Vendor Advisory
securityfocus.com/bid/19282
securityfocus.com/bid/19289
ubuntu.com/usn/usn-330-1
us-cert.gov/cas/techalerts/TA06-214A.html · US Government Resource
vupen.com/english/advisories/2006/3101 · Vendor Advisory
vupen.com/english/advisories/2006/3105 · Vendor Advisory
vupen.com/english/advisories/2007/3486 · Vendor Advisory
vupen.com/english/advisories/2007/4034 · Vendor Advisory
issues.rpath.com/browse/RPL-558
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11301

Lỗ hổng khác của libtiff

Xem tất cả →

Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.

Quét site miễn phí