PT-2006-7526 · Libtiff+1 · Libtiff+1

Andrey Kiselev

·

Publicado

1970-01-01

·

Atualizado

2018-10-03

·

CVE-2006-2026

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions libtiff versions prior to 3.8.1
Description The issue is related to a double free vulnerability in the tif jpeg.c file of libtiff, which can be triggered by a crafted TIFF image. This vulnerability may allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code. The vulnerability can be exploited remotely.
Recommendations For libtiff versions prior to 3.8.1, update to version 3.8.1 or later to resolve the issue. As a temporary workaround, consider restricting the use of libtiff to minimize the risk of exploitation. Avoid using libtiff to process untrusted TIFF images until the issue is resolved.

Exploit

Correção

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2015-00787
BDU:2015-00788
BDU:2015-06213
BDU:2015-06214
BDU:2015-06217
BDU:2015-06218
BDU:2015-09499
CVE-2006-2026
DSA-1054-1
RHSA-2006:0425
RHSA-2006:0648
RHSA-2006_0425

Produtos afetados

Red Hat
Libtiff