CVE-2006-3460: Buffer Overflow
Published Aug 3, 2006
·Updated
Heap-based buffer overflow in the JPEG decoder in the TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an encoded JPEG stream that is longer than the scan line size (TiffScanLineSize).
Affected Software
1 affected component
LibTIFF libtiff<=3.8.1
Remediation
Patch Available
Event History
Aug 3, 2006
CVE Published
01:04 AM
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-3460?
CVE-2006-3460 has a high severity level due to its potential to cause denial of service and execute arbitrary code.
2
How do I fix CVE-2006-3460?
To fix CVE-2006-3460, upgrade to libtiff version 3.8.2 or later.
3
What types of attacks can be caused by CVE-2006-3460?
CVE-2006-3460 can allow context-dependent attackers to execute arbitrary code or cause a denial of service.
4
Which software is affected by CVE-2006-3460?
CVE-2006-3460 affects libtiff versions before 3.8.2.
5
What is the cause of the vulnerability in CVE-2006-3460?
The vulnerability in CVE-2006-3460 is caused by a heap-based buffer overflow in the JPEG decoder of the TIFF library.