CVE-2006-3459
libtiff < 3.8.2 - Stack-Based Buffer Overflow via Large tdir_count in TIFFFetchShortPair
Title source: llmExploitation Summary
EIP tracks 8 public exploits for CVE-2006-3459.
PoCs published by Metasploit, hdm, kf, including Metasploit module exploits/apple_ios/browser/safari_libtiff.
AI-analyzed exploit summary This exploit targets a buffer overflow in libtiff on iPhone firmware versions 1.00, 1.01, 1.02, and 1.1.1. It crafts a malicious TIFF file embedded in an email to achieve remote code execution via a heap-based overflow.
Description
Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow context-dependent attackers to execute arbitrary code or cause a denial of service via unspecified vectors, including a large tdir_count value in the TIFFFetchShortPair function in tif_dirread.c.
Exploits (8)
This exploit targets a buffer overflow in libtiff on iPhone firmware versions 1.00, 1.01, 1.02, and 1.1.1. It crafts a malicious TIFF file embedded in an email to achieve remote code execution via a heap-based overflow.
This exploit targets a buffer overflow in LibTIFF on iPhone MobileSafari (firmware 1.00-1.1.1) via a maliciously crafted TIFF image. It leverages heap manipulation and shellcode execution to achieve remote code execution.
This exploit targets a buffer overflow in libtiff on iPhone firmware versions 1.00, 1.01, 1.02, and 1.1.1 via a maliciously crafted TIFF image. It leverages heap manipulation and shellcode injection to achieve remote code execution on MobileSafari.
This exploit generates a malicious PDF file that leverages an integer overflow vulnerability in Adobe Acrobat Reader's LibTiff library to achieve remote code execution. The exploit crafts a TIFF image embedded in a PDF, which triggers the vulnerability when parsed, leading to arbitrary code execution via shellcode.
This Metasploit module exploits a buffer overflow in libtiff (CVE-2006-3459) affecting Apple iOS MobileSafari on firmware versions 1.00, 1.01, 1.02, and 1.1.1. It crafts a malicious TIFF file to trigger remote code execution via a heap-based overflow.
This Metasploit module exploits a buffer overflow in libtiff on Apple iOS MobileMail (firmware versions 1.00, 1.01, 1.02, 1.1.1) via a maliciously crafted TIFF file sent as an email attachment. The exploit leverages heap manipulation and shellcode execution to achieve remote code execution.
This Metasploit module exploits a buffer overflow in libtiff on iOS MobileSafari (CVE-2006-3459) by crafting a malicious TIFF file. It targets iPhone firmware versions 1.00-1.1.1 and delivers an ARMLE payload via HTTP.
This Metasploit module exploits a buffer overflow in Apple iOS MobileMail's LibTIFF (CVE-2006-3459) by sending a maliciously crafted TIFF file via email. It targets iPhone firmware versions 1.00, 1.01, 1.02, and 1.1.1, leveraging heap manipulation and shellcode execution for remote code execution.