PT-2006-1045 · Libtiff+1 · Libtiff+1

Publicado 2006-01-25 · Atualizado 2024-06-15 · CVE-2006-0405

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: libtiff versions prior to 3.8.1

Description: The issue affects the tiff package in Gentoo Linux, potentially leading to breaches of confidentiality, integrity, and availability of protected information. Exploitation can be carried out remotely by an authenticated attacker. Specifically, the TIFFFetchShortPair function in tif dirread.c in libtiff 3.8.0 allows remote attackers to cause a denial of service (application crash) via a crafted TIFF image that triggers a NULL pointer dereference.

Recommendations: For versions prior to 3.8.1, update to version 3.8.1 or later to resolve the issue. As a temporary workaround, consider restricting access to TIFF images from untrusted sources to minimize the risk of exploitation.

Correção

Identificadores relacionados

BDU:2015-09499

CVE-2006-0405

OPENSUSE-SU-2024:11461-1

Produtos afetados

Gentoo Linux

Libtiff

Referências · 63

• https://exchange.xforce.ibmcloud.com/vulnerabilities/24275 · Nota
• https://suse.com/security/cve/CVE-2018-10963 · Nota
• https://suse.com/security/cve/CVE-2008-2327 · Nota
• https://suse.com/security/cve/CVE-2017-11613 · Nota
• https://suse.com/security/cve/CVE-2018-7456 · Nota
• https://suse.com/security/cve/CVE-2017-7594 · Nota
• https://suse.com/security/cve/CVE-2006-2656 · Nota
• https://suse.com/security/cve/CVE-2018-19210 · Nota
• https://suse.com/security/cve/CVE-2017-9936 · Nota
• https://suse.com/security/cve/CVE-2016-10268 · Nota
• http://bugzilla.remotesensing.org/show_bug.cgi?id=1034 · Nota
• https://suse.com/security/cve/CVE-2017-7602 · Nota
• http://secunia.com/advisories/18587 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-10269 · Nota
• https://suse.com/security/cve/CVE-2018-18557 · Nota