CVE-2006-2024

Published Apr 25, 2006

Last updated 6 years ago

Overview

Description: Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a TIFF image that triggers errors in (1) the TIFFFetchAnyArray function in (a) tif_dirread.c; (2) certain "codec cleanup methods" in (b) tif_lzw.c, (c) tif_pixarlog.c, and (d) tif_zip.c; (3) and improper restoration of setfield and getfield methods in cleanup functions within (e) tif_jpeg.c, tif_pixarlog.c, (f) tif_fax3.c, and tif_zip.c.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 4
Impact score: 2.9
Exploitability score: 8
Vector string: AV:N/AC:L/Au:S/C:N/I:N/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Evaluator

Comment: -
Impact: -
Solution: -

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8D44E5F5-3351-47E6-81D5-859DA1A90E1B",
            "versionEndIncluding": "3.8.0"
          },
          {
            "criteria": "cpe:2.3:a:libtiff:libtiff:3.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CCA5EEB8-9D2C-49A9-BB08-CE5017B79D81"
          },
          {
            "criteria": "cpe:2.3:a:libtiff:libtiff:3.5.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "261FAE51-5207-4136-9FFE-2330A281266C"
          },
          {
            "criteria": "cpe:2.3:a:libtiff:libtiff:3.5.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B32C83B9-F7DA-450A-A687-9A73734CD712"
          },
          {
            "criteria": "cpe:2.3:a:libtiff:libtiff:3.5.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9485283A-B73E-4567-914A-42A86F5FFCB4"
          },
          {
            "criteria": "cpe:2.3:a:libtiff:libtiff:3.5.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "95892168-0FB6-4E3F-9303-2F9B3CF60D2B"
          },
          {
            "criteria": "cpe:2.3:a:libtiff:libtiff:3.5.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A5021564-5E0A-4DDC-BC68-200B6050043E"
          },
          {
            "criteria": "cpe:2.3:a:libtiff:libtiff:3.5.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "11C50750-FE1D-42BA-9125-7D8E872AA2DB"
          },
          {
            "criteria": "cpe:2.3:a:libtiff:libtiff:3.5.7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "19AA66E5-FDDD-4243-B945-DFEBDD25F258"
          },
          {
            "criteria": "cpe:2.3:a:libtiff:libtiff:3.6.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "62F359CD-5DC4-4919-B8E1-95BDDBD27EFC"
          },
          {
            "criteria": "cpe:2.3:a:libtiff:libtiff:3.6.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D2C8C550-3313-4266-B4B3-E9E9047CFE04"
          },
          {
            "criteria": "cpe:2.3:a:libtiff:libtiff:3.7.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "ABEEBA7B-81D5-4148-912B-9AD448BBE741"
          },
          {
            "criteria": "cpe:2.3:a:libtiff:libtiff:3.7.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "448555FE-8E91-4EA7-BA05-6915F5508319"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Evaluator

Configurations

References