CVE-2006-3463: Buffer Overflow
The EstimateStripByteCounts function in TIFF library (libtiff) before 3.8.2 uses a 16-bit unsigned short when iterating over an unsigned 32-bit value, which allows context-dependent attackers to cause a denial of service via a large tdnstrips value, which triggers an infinite loop.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-3463?
CVE-2006-3463 has a high severity level due to its potential for denial of service attack.
How do I fix CVE-2006-3463?
To fix CVE-2006-3463, upgrade the libtiff library to version 3.8.2 or later.
What causes the vulnerability in CVE-2006-3463?
CVE-2006-3463 is caused by the EstimateStripByteCounts function using a 16-bit unsigned short to iterate over a 32-bit value, leading to an infinite loop.
What software is affected by CVE-2006-3463?
CVE-2006-3463 affects the libtiff library versions prior to 3.8.2.
Can CVE-2006-3463 be exploited remotely?
Yes, CVE-2006-3463 can be exploited by context-dependent attackers to cause a denial of service.