CVE-2006-2024

Published: Apr 25, 2006Modified: Apr 16, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a TIFF image that triggers errors in (1) the TIFFFetchAnyArray function in (a) tif_dirread.c; (2) certain "codec cleanup methods" in (b) tif_lzw.c, (c) tif_pixarlog.c, and (d) tif_zip.c; (3) and improper restoration of setfield and getfield methods in cleanup functions within (e) tif_jpeg.c, tif_pixarlog.c, (f) tif_fax3.c, and tif_zip.c.

Affected (13)

Products: Libtiff: Libtiff

Libtiff

1 product

Libtiff

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Libtiff Libtiff	Up to 3.8.0
Libtiff Libtiff	Version 3.4
Libtiff Libtiff	Version 3.5.1
Libtiff Libtiff	Version 3.5.2
Libtiff Libtiff	Version 3.5.3
Libtiff Libtiff	Version 3.5.4
Libtiff Libtiff	Version 3.5.5
Libtiff Libtiff	Version 3.5.6
Libtiff Libtiff	Version 3.5.7
Libtiff Libtiff	Version 3.6.0
Libtiff Libtiff	Version 3.6.1
Libtiff Libtiff	Version 3.7.0
Libtiff Libtiff	Version 3.7.1

References (56)

ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc (unsafe URL)

Source: cve@mitre.org

http://bugzilla.remotesensing.org/show_bug.cgi?id=1102

Source: cve@mitre.org

Exploit

http://secunia.com/advisories/19838

Source: cve@mitre.org

http://secunia.com/advisories/19851

Source: cve@mitre.org

http://secunia.com/advisories/19897

Source: cve@mitre.org

http://secunia.com/advisories/19936

Source: cve@mitre.org

http://secunia.com/advisories/19949

Source: cve@mitre.org

http://secunia.com/advisories/19964

Source: cve@mitre.org

http://secunia.com/advisories/20021

Source: cve@mitre.org

http://secunia.com/advisories/20023

Source: cve@mitre.org

http://secunia.com/advisories/20210

Source: cve@mitre.org

http://secunia.com/advisories/20345

Source: cve@mitre.org

http://secunia.com/advisories/20667

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-26-103099-1

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-66-201332-1

Source: cve@mitre.org

http://support.avaya.com/elmodocs2/security/ASA-2006-119.htm

Source: cve@mitre.org

http://www.debian.org/security/2006/dsa-1054

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200605-17.xml

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2006:082

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2006_04_28.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2006-0425.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/17730

Source: cve@mitre.org

http://www.trustix.org/errata/2006/0024

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1563

Source: cve@mitre.org

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189933

Source: cve@mitre.org

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/26133

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9893

Source: cve@mitre.org

https://usn.ubuntu.com/277-1/

Source: cve@mitre.org

ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc (unsafe URL)