CVE-2006-2120

libtiff - Denial of Service via Crafted TIFF Image with Yr/Yg/Yb Values

Title source: llm

Description

The TIFFToRGB function in libtiff before 3.8.1 allows remote attackers to cause a denial of service (crash) via a crafted TIFF image with Yr/Yg/Yb values that exceed the YCR/YCG/YCB values, which triggers an out-of-bounds read.

References (18)

Core 18

Core References

Vendor Advisory vendor-advisory x_refsource_ubuntu

https://usn.ubuntu.com/277-1/

Patch x_refsource_confirm

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189974

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2006-0425.html

Vendor Advisory vendor-advisory x_refsource_mandriva

http://www.mandriva.com/security/advisories?name=MDKSA-2006:082

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/20210

Patch x_refsource_confirm

http://bugzilla.remotesensing.org/show_bug.cgi?id=1065

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/19949

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/17809

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/20667

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/19936

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/19964

Vendor Advisory vendor-advisory x_refsource_trustix

http://www.trustix.org/errata/2006/0024

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/20330

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2006/dsa-1078

Vendor Advisory vendor-advisory x_refsource_sgi

ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc

Vendor Advisory x_refsource_confirm

http://support.avaya.com/elmodocs2/security/ASA-2006-119.htm

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9572

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/20023

Scores

EPSS 0.0032

EPSS Percentile 55.2%

Details

Status published

Products (1)

libtiff/libtiff 3.8.1

Published May 01, 2006

Tracked Since Feb 18, 2026