high7.5Public exploit code
CVE-2006-3459
Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow context-dependent att…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Apple iOS Mobile Mail - LibTIFF Buffer Overflow (Metasploit)2012-10-09 · remote · ios · Verified
- Apple iOS Mobile Safari - LibTIFF Buffer Overflow (Metasploit)2012-10-09 · remote · ios · Verified
- iPhone MobileMail - LibTIFF Buffer Overflow (Metasploit)2010-09-20 · remote · hardware · Verified
- Apple iPhone MobileSafari LibTIFF - 'email' Remote Buffer Overflow (Metasploit) (2)2010-09-20 · remote · hardware · Verified
- Apple iPhone MobileSafari LibTIFF - 'browser' Remote Buffer Overflow (Metasploit) (1)2010-09-20 · remote · hardware · Verified
- Adobe Reader PDF - LibTiff Integer Overflow Code Execution2010-03-17 · local · windows · Verified
Impact
Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow context-dependent attackers to execute arbitrary code or cause a denial of service via unspecified vectors, including a large tdir_count value in the TIFFFetchShortPair function in tif_dirread.c.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Libtiff | Libtiff | through 3.8.1 Versions 3.4, 3.5.1, 3.5.2, 3.5.3, 3.5.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html
- http://lwn.net/Alerts/194228/
- http://secunia.com/advisories/21253
- http://secunia.com/advisories/21274
- http://secunia.com/advisories/21290
- http://secunia.com/advisories/21304
- http://secunia.com/advisories/21319
- http://secunia.com/advisories/21334
- http://secunia.com/advisories/21338
- http://secunia.com/advisories/21346
- http://secunia.com/advisories/21370
- http://secunia.com/advisories/21392
- http://secunia.com/advisories/21501
- http://secunia.com/advisories/21537
- http://secunia.com/advisories/21598
- http://secunia.com/advisories/21632
- http://secunia.com/advisories/22036
- http://secunia.com/advisories/27181
- http://secunia.com/advisories/27222
- http://secunia.com/advisories/27832
- http://secunia.com/blog/76
- http://securitytracker.com/id?1016628
- http://securitytracker.com/id?1016671
- http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.536600
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1