csaf_redhat - rhsa-2006

rhsa-2006_0648

Vulnerability from csaf_redhat

Published

2006-08-28 11:41

Modified

2024-11-05 16:39

Summary

Red Hat Security Advisory: kdegraphics security update

Notes

Topic

Updated kdegraphics packages that fix several security flaws in kfax are now available for Red Hat Enterprise Linux 2.1, and 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team.

Details

The kdegraphics package contains graphics applications for the K Desktop Environment. Tavis Ormandy of Google discovered a number of flaws in libtiff during a security audit. The kfax application contains a copy of the libtiff code used for parsing TIFF files and is therefore affected by these flaws. An attacker who has the ability to trick a user into opening a malicious TIFF file could cause kfax to crash or possibly execute arbitrary code. (CVE-2006-3459, CVE-2006-3460, CVE-2006-3461, CVE-2006-3462, CVE-2006-3463, CVE-2006-3464, CVE-2006-3465) Red Hat Enterprise Linux 4 is not vulnerable to these issues as kfax uses the shared libtiff library which has been fixed in a previous update. Users of kfax should upgrade to these updated packages, which contain backported patches and are not vulnerable to this issue.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated kdegraphics packages that fix several security flaws in kfax are\nnow available for Red Hat Enterprise Linux 2.1, and 3.\n\nThis update has been rated as having moderate security impact by the Red\nHat Security Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The kdegraphics package contains graphics applications for the K Desktop\nEnvironment.\n\nTavis Ormandy of Google discovered a number of flaws in libtiff during a\nsecurity audit.  The kfax application contains a copy of the libtiff code\nused for parsing TIFF files and is therefore affected by these flaws.  \nAn attacker who has the ability to trick a user into opening a malicious\nTIFF file could cause kfax to crash or possibly execute arbitrary code.\n(CVE-2006-3459, CVE-2006-3460, CVE-2006-3461, CVE-2006-3462, CVE-2006-3463,\nCVE-2006-3464, CVE-2006-3465)\n\nRed Hat Enterprise Linux 4 is not vulnerable to these issues as kfax uses\nthe shared libtiff library which has been fixed in a previous update.\n\nUsers of kfax should upgrade to these updated packages, which contain\nbackported patches and are not vulnerable to this issue.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2006:0648",
        "url": "https://access.redhat.com/errata/RHSA-2006:0648"
      },
      {
        "category": "external",
        "summary": "http://www.redhat.com/security/updates/classification/#moderate",
        "url": "http://www.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "201313",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=201313"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0648.json"
      }
    ],
    "title": "Red Hat Security Advisory: kdegraphics security update",
    "tracking": {
      "current_release_date": "2024-11-05T16:39:40+00:00",
      "generator": {
        "date": "2024-11-05T16:39:40+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2006:0648",
      "initial_release_date": "2006-08-28T11:41:00+00:00",
      "revision_history": [
        {
          "date": "2006-08-28T11:41:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2006-08-28T00:00:00+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T16:39:40+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS version 3",
                "product": {
                  "name": "Red Hat Enterprise Linux AS version 3",
                  "product_id": "3AS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:3::as"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Desktop version 3",
                "product": {
                  "name": "Red Hat Desktop version 3",
                  "product_id": "3Desktop",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:3::desktop"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 3",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 3",
                  "product_id": "3ES",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:3::es"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 3",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 3",
                  "product_id": "3WS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:3::ws"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kdegraphics-devel-7:3.1.3-3.10.ia64",
                "product": {
                  "name": "kdegraphics-devel-7:3.1.3-3.10.ia64",
                  "product_id": "kdegraphics-devel-7:3.1.3-3.10.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kdegraphics-devel@3.1.3-3.10?arch=ia64\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kdegraphics-7:3.1.3-3.10.ia64",
                "product": {
                  "name": "kdegraphics-7:3.1.3-3.10.ia64",
                  "product_id": "kdegraphics-7:3.1.3-3.10.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kdegraphics@3.1.3-3.10?arch=ia64\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
                "product": {
                  "name": "kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
                  "product_id": "kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kdegraphics-debuginfo@3.1.3-3.10?arch=ia64\u0026epoch=7"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kdegraphics-devel-7:3.1.3-3.10.x86_64",
                "product": {
                  "name": "kdegraphics-devel-7:3.1.3-3.10.x86_64",
                  "product_id": "kdegraphics-devel-7:3.1.3-3.10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kdegraphics-devel@3.1.3-3.10?arch=x86_64\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kdegraphics-7:3.1.3-3.10.x86_64",
                "product": {
                  "name": "kdegraphics-7:3.1.3-3.10.x86_64",
                  "product_id": "kdegraphics-7:3.1.3-3.10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kdegraphics@3.1.3-3.10?arch=x86_64\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
                "product": {
                  "name": "kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
                  "product_id": "kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kdegraphics-debuginfo@3.1.3-3.10?arch=x86_64\u0026epoch=7"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kdegraphics-devel-7:3.1.3-3.10.i386",
                "product": {
                  "name": "kdegraphics-devel-7:3.1.3-3.10.i386",
                  "product_id": "kdegraphics-devel-7:3.1.3-3.10.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kdegraphics-devel@3.1.3-3.10?arch=i386\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kdegraphics-7:3.1.3-3.10.i386",
                "product": {
                  "name": "kdegraphics-7:3.1.3-3.10.i386",
                  "product_id": "kdegraphics-7:3.1.3-3.10.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kdegraphics@3.1.3-3.10?arch=i386\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kdegraphics-debuginfo-7:3.1.3-3.10.i386",
                "product": {
                  "name": "kdegraphics-debuginfo-7:3.1.3-3.10.i386",
                  "product_id": "kdegraphics-debuginfo-7:3.1.3-3.10.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kdegraphics-debuginfo@3.1.3-3.10?arch=i386\u0026epoch=7"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kdegraphics-7:3.1.3-3.10.src",
                "product": {
                  "name": "kdegraphics-7:3.1.3-3.10.src",
                  "product_id": "kdegraphics-7:3.1.3-3.10.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kdegraphics@3.1.3-3.10?arch=src\u0026epoch=7"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kdegraphics-devel-7:3.1.3-3.10.ppc",
                "product": {
                  "name": "kdegraphics-devel-7:3.1.3-3.10.ppc",
                  "product_id": "kdegraphics-devel-7:3.1.3-3.10.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kdegraphics-devel@3.1.3-3.10?arch=ppc\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kdegraphics-7:3.1.3-3.10.ppc",
                "product": {
                  "name": "kdegraphics-7:3.1.3-3.10.ppc",
                  "product_id": "kdegraphics-7:3.1.3-3.10.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kdegraphics@3.1.3-3.10?arch=ppc\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
                "product": {
                  "name": "kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
                  "product_id": "kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kdegraphics-debuginfo@3.1.3-3.10?arch=ppc\u0026epoch=7"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kdegraphics-devel-7:3.1.3-3.10.s390x",
                "product": {
                  "name": "kdegraphics-devel-7:3.1.3-3.10.s390x",
                  "product_id": "kdegraphics-devel-7:3.1.3-3.10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kdegraphics-devel@3.1.3-3.10?arch=s390x\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kdegraphics-7:3.1.3-3.10.s390x",
                "product": {
                  "name": "kdegraphics-7:3.1.3-3.10.s390x",
                  "product_id": "kdegraphics-7:3.1.3-3.10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kdegraphics@3.1.3-3.10?arch=s390x\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
                "product": {
                  "name": "kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
                  "product_id": "kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kdegraphics-debuginfo@3.1.3-3.10?arch=s390x\u0026epoch=7"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kdegraphics-devel-7:3.1.3-3.10.s390",
                "product": {
                  "name": "kdegraphics-devel-7:3.1.3-3.10.s390",
                  "product_id": "kdegraphics-devel-7:3.1.3-3.10.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kdegraphics-devel@3.1.3-3.10?arch=s390\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kdegraphics-7:3.1.3-3.10.s390",
                "product": {
                  "name": "kdegraphics-7:3.1.3-3.10.s390",
                  "product_id": "kdegraphics-7:3.1.3-3.10.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kdegraphics@3.1.3-3.10?arch=s390\u0026epoch=7"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kdegraphics-debuginfo-7:3.1.3-3.10.s390",
                "product": {
                  "name": "kdegraphics-debuginfo-7:3.1.3-3.10.s390",
                  "product_id": "kdegraphics-debuginfo-7:3.1.3-3.10.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kdegraphics-debuginfo@3.1.3-3.10?arch=s390\u0026epoch=7"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-7:3.1.3-3.10.i386 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:kdegraphics-7:3.1.3-3.10.i386"
        },
        "product_reference": "kdegraphics-7:3.1.3-3.10.i386",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-7:3.1.3-3.10.ia64 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:kdegraphics-7:3.1.3-3.10.ia64"
        },
        "product_reference": "kdegraphics-7:3.1.3-3.10.ia64",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-7:3.1.3-3.10.ppc as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:kdegraphics-7:3.1.3-3.10.ppc"
        },
        "product_reference": "kdegraphics-7:3.1.3-3.10.ppc",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-7:3.1.3-3.10.s390 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:kdegraphics-7:3.1.3-3.10.s390"
        },
        "product_reference": "kdegraphics-7:3.1.3-3.10.s390",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-7:3.1.3-3.10.s390x as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:kdegraphics-7:3.1.3-3.10.s390x"
        },
        "product_reference": "kdegraphics-7:3.1.3-3.10.s390x",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-7:3.1.3-3.10.src as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:kdegraphics-7:3.1.3-3.10.src"
        },
        "product_reference": "kdegraphics-7:3.1.3-3.10.src",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-7:3.1.3-3.10.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:kdegraphics-7:3.1.3-3.10.x86_64"
        },
        "product_reference": "kdegraphics-7:3.1.3-3.10.x86_64",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-debuginfo-7:3.1.3-3.10.i386 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.i386"
        },
        "product_reference": "kdegraphics-debuginfo-7:3.1.3-3.10.i386",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-debuginfo-7:3.1.3-3.10.ia64 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64"
        },
        "product_reference": "kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-debuginfo-7:3.1.3-3.10.ppc as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc"
        },
        "product_reference": "kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-debuginfo-7:3.1.3-3.10.s390 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390"
        },
        "product_reference": "kdegraphics-debuginfo-7:3.1.3-3.10.s390",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-debuginfo-7:3.1.3-3.10.s390x as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x"
        },
        "product_reference": "kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-debuginfo-7:3.1.3-3.10.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64"
        },
        "product_reference": "kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-devel-7:3.1.3-3.10.i386 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:kdegraphics-devel-7:3.1.3-3.10.i386"
        },
        "product_reference": "kdegraphics-devel-7:3.1.3-3.10.i386",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-devel-7:3.1.3-3.10.ia64 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:kdegraphics-devel-7:3.1.3-3.10.ia64"
        },
        "product_reference": "kdegraphics-devel-7:3.1.3-3.10.ia64",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-devel-7:3.1.3-3.10.ppc as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:kdegraphics-devel-7:3.1.3-3.10.ppc"
        },
        "product_reference": "kdegraphics-devel-7:3.1.3-3.10.ppc",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-devel-7:3.1.3-3.10.s390 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:kdegraphics-devel-7:3.1.3-3.10.s390"
        },
        "product_reference": "kdegraphics-devel-7:3.1.3-3.10.s390",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-devel-7:3.1.3-3.10.s390x as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:kdegraphics-devel-7:3.1.3-3.10.s390x"
        },
        "product_reference": "kdegraphics-devel-7:3.1.3-3.10.s390x",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-devel-7:3.1.3-3.10.x86_64 as a component of Red Hat Enterprise Linux AS version 3",
          "product_id": "3AS:kdegraphics-devel-7:3.1.3-3.10.x86_64"
        },
        "product_reference": "kdegraphics-devel-7:3.1.3-3.10.x86_64",
        "relates_to_product_reference": "3AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-7:3.1.3-3.10.i386 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:kdegraphics-7:3.1.3-3.10.i386"
        },
        "product_reference": "kdegraphics-7:3.1.3-3.10.i386",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-7:3.1.3-3.10.ia64 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:kdegraphics-7:3.1.3-3.10.ia64"
        },
        "product_reference": "kdegraphics-7:3.1.3-3.10.ia64",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-7:3.1.3-3.10.ppc as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:kdegraphics-7:3.1.3-3.10.ppc"
        },
        "product_reference": "kdegraphics-7:3.1.3-3.10.ppc",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-7:3.1.3-3.10.s390 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:kdegraphics-7:3.1.3-3.10.s390"
        },
        "product_reference": "kdegraphics-7:3.1.3-3.10.s390",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-7:3.1.3-3.10.s390x as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:kdegraphics-7:3.1.3-3.10.s390x"
        },
        "product_reference": "kdegraphics-7:3.1.3-3.10.s390x",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-7:3.1.3-3.10.src as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:kdegraphics-7:3.1.3-3.10.src"
        },
        "product_reference": "kdegraphics-7:3.1.3-3.10.src",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-7:3.1.3-3.10.x86_64 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:kdegraphics-7:3.1.3-3.10.x86_64"
        },
        "product_reference": "kdegraphics-7:3.1.3-3.10.x86_64",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-debuginfo-7:3.1.3-3.10.i386 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.i386"
        },
        "product_reference": "kdegraphics-debuginfo-7:3.1.3-3.10.i386",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-debuginfo-7:3.1.3-3.10.ia64 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ia64"
        },
        "product_reference": "kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-debuginfo-7:3.1.3-3.10.ppc as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ppc"
        },
        "product_reference": "kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-debuginfo-7:3.1.3-3.10.s390 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390"
        },
        "product_reference": "kdegraphics-debuginfo-7:3.1.3-3.10.s390",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-debuginfo-7:3.1.3-3.10.s390x as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390x"
        },
        "product_reference": "kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-debuginfo-7:3.1.3-3.10.x86_64 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64"
        },
        "product_reference": "kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-devel-7:3.1.3-3.10.i386 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:kdegraphics-devel-7:3.1.3-3.10.i386"
        },
        "product_reference": "kdegraphics-devel-7:3.1.3-3.10.i386",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-devel-7:3.1.3-3.10.ia64 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ia64"
        },
        "product_reference": "kdegraphics-devel-7:3.1.3-3.10.ia64",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-devel-7:3.1.3-3.10.ppc as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ppc"
        },
        "product_reference": "kdegraphics-devel-7:3.1.3-3.10.ppc",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-devel-7:3.1.3-3.10.s390 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390"
        },
        "product_reference": "kdegraphics-devel-7:3.1.3-3.10.s390",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-devel-7:3.1.3-3.10.s390x as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390x"
        },
        "product_reference": "kdegraphics-devel-7:3.1.3-3.10.s390x",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-devel-7:3.1.3-3.10.x86_64 as a component of Red Hat Desktop version 3",
          "product_id": "3Desktop:kdegraphics-devel-7:3.1.3-3.10.x86_64"
        },
        "product_reference": "kdegraphics-devel-7:3.1.3-3.10.x86_64",
        "relates_to_product_reference": "3Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-7:3.1.3-3.10.i386 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:kdegraphics-7:3.1.3-3.10.i386"
        },
        "product_reference": "kdegraphics-7:3.1.3-3.10.i386",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-7:3.1.3-3.10.ia64 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:kdegraphics-7:3.1.3-3.10.ia64"
        },
        "product_reference": "kdegraphics-7:3.1.3-3.10.ia64",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-7:3.1.3-3.10.ppc as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:kdegraphics-7:3.1.3-3.10.ppc"
        },
        "product_reference": "kdegraphics-7:3.1.3-3.10.ppc",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-7:3.1.3-3.10.s390 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:kdegraphics-7:3.1.3-3.10.s390"
        },
        "product_reference": "kdegraphics-7:3.1.3-3.10.s390",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-7:3.1.3-3.10.s390x as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:kdegraphics-7:3.1.3-3.10.s390x"
        },
        "product_reference": "kdegraphics-7:3.1.3-3.10.s390x",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-7:3.1.3-3.10.src as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:kdegraphics-7:3.1.3-3.10.src"
        },
        "product_reference": "kdegraphics-7:3.1.3-3.10.src",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-7:3.1.3-3.10.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:kdegraphics-7:3.1.3-3.10.x86_64"
        },
        "product_reference": "kdegraphics-7:3.1.3-3.10.x86_64",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-debuginfo-7:3.1.3-3.10.i386 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.i386"
        },
        "product_reference": "kdegraphics-debuginfo-7:3.1.3-3.10.i386",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-debuginfo-7:3.1.3-3.10.ia64 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ia64"
        },
        "product_reference": "kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-debuginfo-7:3.1.3-3.10.ppc as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ppc"
        },
        "product_reference": "kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-debuginfo-7:3.1.3-3.10.s390 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390"
        },
        "product_reference": "kdegraphics-debuginfo-7:3.1.3-3.10.s390",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-debuginfo-7:3.1.3-3.10.s390x as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390x"
        },
        "product_reference": "kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-debuginfo-7:3.1.3-3.10.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64"
        },
        "product_reference": "kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-devel-7:3.1.3-3.10.i386 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:kdegraphics-devel-7:3.1.3-3.10.i386"
        },
        "product_reference": "kdegraphics-devel-7:3.1.3-3.10.i386",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-devel-7:3.1.3-3.10.ia64 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:kdegraphics-devel-7:3.1.3-3.10.ia64"
        },
        "product_reference": "kdegraphics-devel-7:3.1.3-3.10.ia64",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-devel-7:3.1.3-3.10.ppc as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:kdegraphics-devel-7:3.1.3-3.10.ppc"
        },
        "product_reference": "kdegraphics-devel-7:3.1.3-3.10.ppc",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-devel-7:3.1.3-3.10.s390 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:kdegraphics-devel-7:3.1.3-3.10.s390"
        },
        "product_reference": "kdegraphics-devel-7:3.1.3-3.10.s390",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-devel-7:3.1.3-3.10.s390x as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:kdegraphics-devel-7:3.1.3-3.10.s390x"
        },
        "product_reference": "kdegraphics-devel-7:3.1.3-3.10.s390x",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-devel-7:3.1.3-3.10.x86_64 as a component of Red Hat Enterprise Linux ES version 3",
          "product_id": "3ES:kdegraphics-devel-7:3.1.3-3.10.x86_64"
        },
        "product_reference": "kdegraphics-devel-7:3.1.3-3.10.x86_64",
        "relates_to_product_reference": "3ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-7:3.1.3-3.10.i386 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:kdegraphics-7:3.1.3-3.10.i386"
        },
        "product_reference": "kdegraphics-7:3.1.3-3.10.i386",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-7:3.1.3-3.10.ia64 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:kdegraphics-7:3.1.3-3.10.ia64"
        },
        "product_reference": "kdegraphics-7:3.1.3-3.10.ia64",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-7:3.1.3-3.10.ppc as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:kdegraphics-7:3.1.3-3.10.ppc"
        },
        "product_reference": "kdegraphics-7:3.1.3-3.10.ppc",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-7:3.1.3-3.10.s390 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:kdegraphics-7:3.1.3-3.10.s390"
        },
        "product_reference": "kdegraphics-7:3.1.3-3.10.s390",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-7:3.1.3-3.10.s390x as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:kdegraphics-7:3.1.3-3.10.s390x"
        },
        "product_reference": "kdegraphics-7:3.1.3-3.10.s390x",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-7:3.1.3-3.10.src as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:kdegraphics-7:3.1.3-3.10.src"
        },
        "product_reference": "kdegraphics-7:3.1.3-3.10.src",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-7:3.1.3-3.10.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:kdegraphics-7:3.1.3-3.10.x86_64"
        },
        "product_reference": "kdegraphics-7:3.1.3-3.10.x86_64",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-debuginfo-7:3.1.3-3.10.i386 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.i386"
        },
        "product_reference": "kdegraphics-debuginfo-7:3.1.3-3.10.i386",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-debuginfo-7:3.1.3-3.10.ia64 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64"
        },
        "product_reference": "kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-debuginfo-7:3.1.3-3.10.ppc as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc"
        },
        "product_reference": "kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-debuginfo-7:3.1.3-3.10.s390 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390"
        },
        "product_reference": "kdegraphics-debuginfo-7:3.1.3-3.10.s390",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-debuginfo-7:3.1.3-3.10.s390x as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x"
        },
        "product_reference": "kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-debuginfo-7:3.1.3-3.10.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64"
        },
        "product_reference": "kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-devel-7:3.1.3-3.10.i386 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:kdegraphics-devel-7:3.1.3-3.10.i386"
        },
        "product_reference": "kdegraphics-devel-7:3.1.3-3.10.i386",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-devel-7:3.1.3-3.10.ia64 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:kdegraphics-devel-7:3.1.3-3.10.ia64"
        },
        "product_reference": "kdegraphics-devel-7:3.1.3-3.10.ia64",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-devel-7:3.1.3-3.10.ppc as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:kdegraphics-devel-7:3.1.3-3.10.ppc"
        },
        "product_reference": "kdegraphics-devel-7:3.1.3-3.10.ppc",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-devel-7:3.1.3-3.10.s390 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:kdegraphics-devel-7:3.1.3-3.10.s390"
        },
        "product_reference": "kdegraphics-devel-7:3.1.3-3.10.s390",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-devel-7:3.1.3-3.10.s390x as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:kdegraphics-devel-7:3.1.3-3.10.s390x"
        },
        "product_reference": "kdegraphics-devel-7:3.1.3-3.10.s390x",
        "relates_to_product_reference": "3WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kdegraphics-devel-7:3.1.3-3.10.x86_64 as a component of Red Hat Enterprise Linux WS version 3",
          "product_id": "3WS:kdegraphics-devel-7:3.1.3-3.10.x86_64"
        },
        "product_reference": "kdegraphics-devel-7:3.1.3-3.10.x86_64",
        "relates_to_product_reference": "3WS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2006-2024",
      "discovery_date": "2006-04-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618083"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a TIFF image that triggers errors in (1) the TIFFFetchAnyArray function in (a) tif_dirread.c; (2) certain \"codec cleanup methods\" in (b) tif_lzw.c, (c) tif_pixarlog.c, and (d) tif_zip.c; (3) and improper restoration of setfield and getfield methods in cleanup functions within (e) tif_jpeg.c, tif_pixarlog.c, (f) tif_fax3.c, and tif_zip.c.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS:kdegraphics-7:3.1.3-3.10.i386",
          "3AS:kdegraphics-7:3.1.3-3.10.ia64",
          "3AS:kdegraphics-7:3.1.3-3.10.ppc",
          "3AS:kdegraphics-7:3.1.3-3.10.s390",
          "3AS:kdegraphics-7:3.1.3-3.10.s390x",
          "3AS:kdegraphics-7:3.1.3-3.10.src",
          "3AS:kdegraphics-7:3.1.3-3.10.x86_64",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.x86_64",
          "3Desktop:kdegraphics-7:3.1.3-3.10.i386",
          "3Desktop:kdegraphics-7:3.1.3-3.10.ia64",
          "3Desktop:kdegraphics-7:3.1.3-3.10.ppc",
          "3Desktop:kdegraphics-7:3.1.3-3.10.s390",
          "3Desktop:kdegraphics-7:3.1.3-3.10.s390x",
          "3Desktop:kdegraphics-7:3.1.3-3.10.src",
          "3Desktop:kdegraphics-7:3.1.3-3.10.x86_64",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.x86_64",
          "3ES:kdegraphics-7:3.1.3-3.10.i386",
          "3ES:kdegraphics-7:3.1.3-3.10.ia64",
          "3ES:kdegraphics-7:3.1.3-3.10.ppc",
          "3ES:kdegraphics-7:3.1.3-3.10.s390",
          "3ES:kdegraphics-7:3.1.3-3.10.s390x",
          "3ES:kdegraphics-7:3.1.3-3.10.src",
          "3ES:kdegraphics-7:3.1.3-3.10.x86_64",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.x86_64",
          "3WS:kdegraphics-7:3.1.3-3.10.i386",
          "3WS:kdegraphics-7:3.1.3-3.10.ia64",
          "3WS:kdegraphics-7:3.1.3-3.10.ppc",
          "3WS:kdegraphics-7:3.1.3-3.10.s390",
          "3WS:kdegraphics-7:3.1.3-3.10.s390x",
          "3WS:kdegraphics-7:3.1.3-3.10.src",
          "3WS:kdegraphics-7:3.1.3-3.10.x86_64",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-2024"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618083",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618083"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-2024",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-2024"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-2024",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-2024"
        }
      ],
      "release_date": "2006-03-03T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-08-28T11:41:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "3AS:kdegraphics-7:3.1.3-3.10.i386",
            "3AS:kdegraphics-7:3.1.3-3.10.ia64",
            "3AS:kdegraphics-7:3.1.3-3.10.ppc",
            "3AS:kdegraphics-7:3.1.3-3.10.s390",
            "3AS:kdegraphics-7:3.1.3-3.10.s390x",
            "3AS:kdegraphics-7:3.1.3-3.10.src",
            "3AS:kdegraphics-7:3.1.3-3.10.x86_64",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.x86_64",
            "3Desktop:kdegraphics-7:3.1.3-3.10.i386",
            "3Desktop:kdegraphics-7:3.1.3-3.10.ia64",
            "3Desktop:kdegraphics-7:3.1.3-3.10.ppc",
            "3Desktop:kdegraphics-7:3.1.3-3.10.s390",
            "3Desktop:kdegraphics-7:3.1.3-3.10.s390x",
            "3Desktop:kdegraphics-7:3.1.3-3.10.src",
            "3Desktop:kdegraphics-7:3.1.3-3.10.x86_64",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.x86_64",
            "3ES:kdegraphics-7:3.1.3-3.10.i386",
            "3ES:kdegraphics-7:3.1.3-3.10.ia64",
            "3ES:kdegraphics-7:3.1.3-3.10.ppc",
            "3ES:kdegraphics-7:3.1.3-3.10.s390",
            "3ES:kdegraphics-7:3.1.3-3.10.s390x",
            "3ES:kdegraphics-7:3.1.3-3.10.src",
            "3ES:kdegraphics-7:3.1.3-3.10.x86_64",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.x86_64",
            "3WS:kdegraphics-7:3.1.3-3.10.i386",
            "3WS:kdegraphics-7:3.1.3-3.10.ia64",
            "3WS:kdegraphics-7:3.1.3-3.10.ppc",
            "3WS:kdegraphics-7:3.1.3-3.10.s390",
            "3WS:kdegraphics-7:3.1.3-3.10.s390x",
            "3WS:kdegraphics-7:3.1.3-3.10.src",
            "3WS:kdegraphics-7:3.1.3-3.10.x86_64",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0648"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2006-2025",
      "discovery_date": "2006-04-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618084"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted TIFF image.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS:kdegraphics-7:3.1.3-3.10.i386",
          "3AS:kdegraphics-7:3.1.3-3.10.ia64",
          "3AS:kdegraphics-7:3.1.3-3.10.ppc",
          "3AS:kdegraphics-7:3.1.3-3.10.s390",
          "3AS:kdegraphics-7:3.1.3-3.10.s390x",
          "3AS:kdegraphics-7:3.1.3-3.10.src",
          "3AS:kdegraphics-7:3.1.3-3.10.x86_64",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.x86_64",
          "3Desktop:kdegraphics-7:3.1.3-3.10.i386",
          "3Desktop:kdegraphics-7:3.1.3-3.10.ia64",
          "3Desktop:kdegraphics-7:3.1.3-3.10.ppc",
          "3Desktop:kdegraphics-7:3.1.3-3.10.s390",
          "3Desktop:kdegraphics-7:3.1.3-3.10.s390x",
          "3Desktop:kdegraphics-7:3.1.3-3.10.src",
          "3Desktop:kdegraphics-7:3.1.3-3.10.x86_64",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.x86_64",
          "3ES:kdegraphics-7:3.1.3-3.10.i386",
          "3ES:kdegraphics-7:3.1.3-3.10.ia64",
          "3ES:kdegraphics-7:3.1.3-3.10.ppc",
          "3ES:kdegraphics-7:3.1.3-3.10.s390",
          "3ES:kdegraphics-7:3.1.3-3.10.s390x",
          "3ES:kdegraphics-7:3.1.3-3.10.src",
          "3ES:kdegraphics-7:3.1.3-3.10.x86_64",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.x86_64",
          "3WS:kdegraphics-7:3.1.3-3.10.i386",
          "3WS:kdegraphics-7:3.1.3-3.10.ia64",
          "3WS:kdegraphics-7:3.1.3-3.10.ppc",
          "3WS:kdegraphics-7:3.1.3-3.10.s390",
          "3WS:kdegraphics-7:3.1.3-3.10.s390x",
          "3WS:kdegraphics-7:3.1.3-3.10.src",
          "3WS:kdegraphics-7:3.1.3-3.10.x86_64",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-2025"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618084",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618084"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-2025",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-2025"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-2025",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-2025"
        }
      ],
      "release_date": "2006-03-03T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-08-28T11:41:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "3AS:kdegraphics-7:3.1.3-3.10.i386",
            "3AS:kdegraphics-7:3.1.3-3.10.ia64",
            "3AS:kdegraphics-7:3.1.3-3.10.ppc",
            "3AS:kdegraphics-7:3.1.3-3.10.s390",
            "3AS:kdegraphics-7:3.1.3-3.10.s390x",
            "3AS:kdegraphics-7:3.1.3-3.10.src",
            "3AS:kdegraphics-7:3.1.3-3.10.x86_64",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.x86_64",
            "3Desktop:kdegraphics-7:3.1.3-3.10.i386",
            "3Desktop:kdegraphics-7:3.1.3-3.10.ia64",
            "3Desktop:kdegraphics-7:3.1.3-3.10.ppc",
            "3Desktop:kdegraphics-7:3.1.3-3.10.s390",
            "3Desktop:kdegraphics-7:3.1.3-3.10.s390x",
            "3Desktop:kdegraphics-7:3.1.3-3.10.src",
            "3Desktop:kdegraphics-7:3.1.3-3.10.x86_64",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.x86_64",
            "3ES:kdegraphics-7:3.1.3-3.10.i386",
            "3ES:kdegraphics-7:3.1.3-3.10.ia64",
            "3ES:kdegraphics-7:3.1.3-3.10.ppc",
            "3ES:kdegraphics-7:3.1.3-3.10.s390",
            "3ES:kdegraphics-7:3.1.3-3.10.s390x",
            "3ES:kdegraphics-7:3.1.3-3.10.src",
            "3ES:kdegraphics-7:3.1.3-3.10.x86_64",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.x86_64",
            "3WS:kdegraphics-7:3.1.3-3.10.i386",
            "3WS:kdegraphics-7:3.1.3-3.10.ia64",
            "3WS:kdegraphics-7:3.1.3-3.10.ppc",
            "3WS:kdegraphics-7:3.1.3-3.10.s390",
            "3WS:kdegraphics-7:3.1.3-3.10.s390x",
            "3WS:kdegraphics-7:3.1.3-3.10.src",
            "3WS:kdegraphics-7:3.1.3-3.10.x86_64",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0648"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2006-2026",
      "discovery_date": "2006-04-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618085"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Double free vulnerability in tif_jpeg.c in libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image that triggers errors related to \"setfield/getfield methods in cleanup functions.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS:kdegraphics-7:3.1.3-3.10.i386",
          "3AS:kdegraphics-7:3.1.3-3.10.ia64",
          "3AS:kdegraphics-7:3.1.3-3.10.ppc",
          "3AS:kdegraphics-7:3.1.3-3.10.s390",
          "3AS:kdegraphics-7:3.1.3-3.10.s390x",
          "3AS:kdegraphics-7:3.1.3-3.10.src",
          "3AS:kdegraphics-7:3.1.3-3.10.x86_64",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.x86_64",
          "3Desktop:kdegraphics-7:3.1.3-3.10.i386",
          "3Desktop:kdegraphics-7:3.1.3-3.10.ia64",
          "3Desktop:kdegraphics-7:3.1.3-3.10.ppc",
          "3Desktop:kdegraphics-7:3.1.3-3.10.s390",
          "3Desktop:kdegraphics-7:3.1.3-3.10.s390x",
          "3Desktop:kdegraphics-7:3.1.3-3.10.src",
          "3Desktop:kdegraphics-7:3.1.3-3.10.x86_64",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.x86_64",
          "3ES:kdegraphics-7:3.1.3-3.10.i386",
          "3ES:kdegraphics-7:3.1.3-3.10.ia64",
          "3ES:kdegraphics-7:3.1.3-3.10.ppc",
          "3ES:kdegraphics-7:3.1.3-3.10.s390",
          "3ES:kdegraphics-7:3.1.3-3.10.s390x",
          "3ES:kdegraphics-7:3.1.3-3.10.src",
          "3ES:kdegraphics-7:3.1.3-3.10.x86_64",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.x86_64",
          "3WS:kdegraphics-7:3.1.3-3.10.i386",
          "3WS:kdegraphics-7:3.1.3-3.10.ia64",
          "3WS:kdegraphics-7:3.1.3-3.10.ppc",
          "3WS:kdegraphics-7:3.1.3-3.10.s390",
          "3WS:kdegraphics-7:3.1.3-3.10.s390x",
          "3WS:kdegraphics-7:3.1.3-3.10.src",
          "3WS:kdegraphics-7:3.1.3-3.10.x86_64",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-2026"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618085",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618085"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-2026",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-2026"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-2026",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-2026"
        }
      ],
      "release_date": "2006-03-03T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-08-28T11:41:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "3AS:kdegraphics-7:3.1.3-3.10.i386",
            "3AS:kdegraphics-7:3.1.3-3.10.ia64",
            "3AS:kdegraphics-7:3.1.3-3.10.ppc",
            "3AS:kdegraphics-7:3.1.3-3.10.s390",
            "3AS:kdegraphics-7:3.1.3-3.10.s390x",
            "3AS:kdegraphics-7:3.1.3-3.10.src",
            "3AS:kdegraphics-7:3.1.3-3.10.x86_64",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.x86_64",
            "3Desktop:kdegraphics-7:3.1.3-3.10.i386",
            "3Desktop:kdegraphics-7:3.1.3-3.10.ia64",
            "3Desktop:kdegraphics-7:3.1.3-3.10.ppc",
            "3Desktop:kdegraphics-7:3.1.3-3.10.s390",
            "3Desktop:kdegraphics-7:3.1.3-3.10.s390x",
            "3Desktop:kdegraphics-7:3.1.3-3.10.src",
            "3Desktop:kdegraphics-7:3.1.3-3.10.x86_64",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.x86_64",
            "3ES:kdegraphics-7:3.1.3-3.10.i386",
            "3ES:kdegraphics-7:3.1.3-3.10.ia64",
            "3ES:kdegraphics-7:3.1.3-3.10.ppc",
            "3ES:kdegraphics-7:3.1.3-3.10.s390",
            "3ES:kdegraphics-7:3.1.3-3.10.s390x",
            "3ES:kdegraphics-7:3.1.3-3.10.src",
            "3ES:kdegraphics-7:3.1.3-3.10.x86_64",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.x86_64",
            "3WS:kdegraphics-7:3.1.3-3.10.i386",
            "3WS:kdegraphics-7:3.1.3-3.10.ia64",
            "3WS:kdegraphics-7:3.1.3-3.10.ppc",
            "3WS:kdegraphics-7:3.1.3-3.10.s390",
            "3WS:kdegraphics-7:3.1.3-3.10.s390x",
            "3WS:kdegraphics-7:3.1.3-3.10.src",
            "3WS:kdegraphics-7:3.1.3-3.10.x86_64",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0648"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2006-3459",
      "discovery_date": "2006-07-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "199111"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow context-dependent attackers to execute arbitrary code or cause a denial of service via unspecified vectors, including a large tdir_count value in the TIFFFetchShortPair function in tif_dirread.c.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Multiple libtiff flaws (CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS:kdegraphics-7:3.1.3-3.10.i386",
          "3AS:kdegraphics-7:3.1.3-3.10.ia64",
          "3AS:kdegraphics-7:3.1.3-3.10.ppc",
          "3AS:kdegraphics-7:3.1.3-3.10.s390",
          "3AS:kdegraphics-7:3.1.3-3.10.s390x",
          "3AS:kdegraphics-7:3.1.3-3.10.src",
          "3AS:kdegraphics-7:3.1.3-3.10.x86_64",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.x86_64",
          "3Desktop:kdegraphics-7:3.1.3-3.10.i386",
          "3Desktop:kdegraphics-7:3.1.3-3.10.ia64",
          "3Desktop:kdegraphics-7:3.1.3-3.10.ppc",
          "3Desktop:kdegraphics-7:3.1.3-3.10.s390",
          "3Desktop:kdegraphics-7:3.1.3-3.10.s390x",
          "3Desktop:kdegraphics-7:3.1.3-3.10.src",
          "3Desktop:kdegraphics-7:3.1.3-3.10.x86_64",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.x86_64",
          "3ES:kdegraphics-7:3.1.3-3.10.i386",
          "3ES:kdegraphics-7:3.1.3-3.10.ia64",
          "3ES:kdegraphics-7:3.1.3-3.10.ppc",
          "3ES:kdegraphics-7:3.1.3-3.10.s390",
          "3ES:kdegraphics-7:3.1.3-3.10.s390x",
          "3ES:kdegraphics-7:3.1.3-3.10.src",
          "3ES:kdegraphics-7:3.1.3-3.10.x86_64",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.x86_64",
          "3WS:kdegraphics-7:3.1.3-3.10.i386",
          "3WS:kdegraphics-7:3.1.3-3.10.ia64",
          "3WS:kdegraphics-7:3.1.3-3.10.ppc",
          "3WS:kdegraphics-7:3.1.3-3.10.s390",
          "3WS:kdegraphics-7:3.1.3-3.10.s390x",
          "3WS:kdegraphics-7:3.1.3-3.10.src",
          "3WS:kdegraphics-7:3.1.3-3.10.x86_64",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-3459"
        },
        {
          "category": "external",
          "summary": "RHBZ#199111",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=199111"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-3459",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-3459"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-3459",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-3459"
        }
      ],
      "release_date": "2006-08-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-08-28T11:41:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "3AS:kdegraphics-7:3.1.3-3.10.i386",
            "3AS:kdegraphics-7:3.1.3-3.10.ia64",
            "3AS:kdegraphics-7:3.1.3-3.10.ppc",
            "3AS:kdegraphics-7:3.1.3-3.10.s390",
            "3AS:kdegraphics-7:3.1.3-3.10.s390x",
            "3AS:kdegraphics-7:3.1.3-3.10.src",
            "3AS:kdegraphics-7:3.1.3-3.10.x86_64",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.x86_64",
            "3Desktop:kdegraphics-7:3.1.3-3.10.i386",
            "3Desktop:kdegraphics-7:3.1.3-3.10.ia64",
            "3Desktop:kdegraphics-7:3.1.3-3.10.ppc",
            "3Desktop:kdegraphics-7:3.1.3-3.10.s390",
            "3Desktop:kdegraphics-7:3.1.3-3.10.s390x",
            "3Desktop:kdegraphics-7:3.1.3-3.10.src",
            "3Desktop:kdegraphics-7:3.1.3-3.10.x86_64",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.x86_64",
            "3ES:kdegraphics-7:3.1.3-3.10.i386",
            "3ES:kdegraphics-7:3.1.3-3.10.ia64",
            "3ES:kdegraphics-7:3.1.3-3.10.ppc",
            "3ES:kdegraphics-7:3.1.3-3.10.s390",
            "3ES:kdegraphics-7:3.1.3-3.10.s390x",
            "3ES:kdegraphics-7:3.1.3-3.10.src",
            "3ES:kdegraphics-7:3.1.3-3.10.x86_64",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.x86_64",
            "3WS:kdegraphics-7:3.1.3-3.10.i386",
            "3WS:kdegraphics-7:3.1.3-3.10.ia64",
            "3WS:kdegraphics-7:3.1.3-3.10.ppc",
            "3WS:kdegraphics-7:3.1.3-3.10.s390",
            "3WS:kdegraphics-7:3.1.3-3.10.s390x",
            "3WS:kdegraphics-7:3.1.3-3.10.src",
            "3WS:kdegraphics-7:3.1.3-3.10.x86_64",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0648"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Multiple libtiff flaws (CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)"
    },
    {
      "cve": "CVE-2006-3460",
      "discovery_date": "2006-07-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "199111"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Heap-based buffer overflow in the JPEG decoder in the TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an encoded JPEG stream that is longer than the scan line size (TiffScanLineSize).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Multiple libtiff flaws (CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS:kdegraphics-7:3.1.3-3.10.i386",
          "3AS:kdegraphics-7:3.1.3-3.10.ia64",
          "3AS:kdegraphics-7:3.1.3-3.10.ppc",
          "3AS:kdegraphics-7:3.1.3-3.10.s390",
          "3AS:kdegraphics-7:3.1.3-3.10.s390x",
          "3AS:kdegraphics-7:3.1.3-3.10.src",
          "3AS:kdegraphics-7:3.1.3-3.10.x86_64",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.x86_64",
          "3Desktop:kdegraphics-7:3.1.3-3.10.i386",
          "3Desktop:kdegraphics-7:3.1.3-3.10.ia64",
          "3Desktop:kdegraphics-7:3.1.3-3.10.ppc",
          "3Desktop:kdegraphics-7:3.1.3-3.10.s390",
          "3Desktop:kdegraphics-7:3.1.3-3.10.s390x",
          "3Desktop:kdegraphics-7:3.1.3-3.10.src",
          "3Desktop:kdegraphics-7:3.1.3-3.10.x86_64",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.x86_64",
          "3ES:kdegraphics-7:3.1.3-3.10.i386",
          "3ES:kdegraphics-7:3.1.3-3.10.ia64",
          "3ES:kdegraphics-7:3.1.3-3.10.ppc",
          "3ES:kdegraphics-7:3.1.3-3.10.s390",
          "3ES:kdegraphics-7:3.1.3-3.10.s390x",
          "3ES:kdegraphics-7:3.1.3-3.10.src",
          "3ES:kdegraphics-7:3.1.3-3.10.x86_64",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.x86_64",
          "3WS:kdegraphics-7:3.1.3-3.10.i386",
          "3WS:kdegraphics-7:3.1.3-3.10.ia64",
          "3WS:kdegraphics-7:3.1.3-3.10.ppc",
          "3WS:kdegraphics-7:3.1.3-3.10.s390",
          "3WS:kdegraphics-7:3.1.3-3.10.s390x",
          "3WS:kdegraphics-7:3.1.3-3.10.src",
          "3WS:kdegraphics-7:3.1.3-3.10.x86_64",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-3460"
        },
        {
          "category": "external",
          "summary": "RHBZ#199111",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=199111"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-3460",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-3460"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-3460",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-3460"
        }
      ],
      "release_date": "2006-08-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-08-28T11:41:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "3AS:kdegraphics-7:3.1.3-3.10.i386",
            "3AS:kdegraphics-7:3.1.3-3.10.ia64",
            "3AS:kdegraphics-7:3.1.3-3.10.ppc",
            "3AS:kdegraphics-7:3.1.3-3.10.s390",
            "3AS:kdegraphics-7:3.1.3-3.10.s390x",
            "3AS:kdegraphics-7:3.1.3-3.10.src",
            "3AS:kdegraphics-7:3.1.3-3.10.x86_64",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.x86_64",
            "3Desktop:kdegraphics-7:3.1.3-3.10.i386",
            "3Desktop:kdegraphics-7:3.1.3-3.10.ia64",
            "3Desktop:kdegraphics-7:3.1.3-3.10.ppc",
            "3Desktop:kdegraphics-7:3.1.3-3.10.s390",
            "3Desktop:kdegraphics-7:3.1.3-3.10.s390x",
            "3Desktop:kdegraphics-7:3.1.3-3.10.src",
            "3Desktop:kdegraphics-7:3.1.3-3.10.x86_64",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.x86_64",
            "3ES:kdegraphics-7:3.1.3-3.10.i386",
            "3ES:kdegraphics-7:3.1.3-3.10.ia64",
            "3ES:kdegraphics-7:3.1.3-3.10.ppc",
            "3ES:kdegraphics-7:3.1.3-3.10.s390",
            "3ES:kdegraphics-7:3.1.3-3.10.s390x",
            "3ES:kdegraphics-7:3.1.3-3.10.src",
            "3ES:kdegraphics-7:3.1.3-3.10.x86_64",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.x86_64",
            "3WS:kdegraphics-7:3.1.3-3.10.i386",
            "3WS:kdegraphics-7:3.1.3-3.10.ia64",
            "3WS:kdegraphics-7:3.1.3-3.10.ppc",
            "3WS:kdegraphics-7:3.1.3-3.10.s390",
            "3WS:kdegraphics-7:3.1.3-3.10.s390x",
            "3WS:kdegraphics-7:3.1.3-3.10.src",
            "3WS:kdegraphics-7:3.1.3-3.10.x86_64",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0648"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Multiple libtiff flaws (CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)"
    },
    {
      "cve": "CVE-2006-3461",
      "discovery_date": "2006-07-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "199111"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Heap-based buffer overflow in the PixarLog decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Multiple libtiff flaws (CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS:kdegraphics-7:3.1.3-3.10.i386",
          "3AS:kdegraphics-7:3.1.3-3.10.ia64",
          "3AS:kdegraphics-7:3.1.3-3.10.ppc",
          "3AS:kdegraphics-7:3.1.3-3.10.s390",
          "3AS:kdegraphics-7:3.1.3-3.10.s390x",
          "3AS:kdegraphics-7:3.1.3-3.10.src",
          "3AS:kdegraphics-7:3.1.3-3.10.x86_64",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.x86_64",
          "3Desktop:kdegraphics-7:3.1.3-3.10.i386",
          "3Desktop:kdegraphics-7:3.1.3-3.10.ia64",
          "3Desktop:kdegraphics-7:3.1.3-3.10.ppc",
          "3Desktop:kdegraphics-7:3.1.3-3.10.s390",
          "3Desktop:kdegraphics-7:3.1.3-3.10.s390x",
          "3Desktop:kdegraphics-7:3.1.3-3.10.src",
          "3Desktop:kdegraphics-7:3.1.3-3.10.x86_64",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.x86_64",
          "3ES:kdegraphics-7:3.1.3-3.10.i386",
          "3ES:kdegraphics-7:3.1.3-3.10.ia64",
          "3ES:kdegraphics-7:3.1.3-3.10.ppc",
          "3ES:kdegraphics-7:3.1.3-3.10.s390",
          "3ES:kdegraphics-7:3.1.3-3.10.s390x",
          "3ES:kdegraphics-7:3.1.3-3.10.src",
          "3ES:kdegraphics-7:3.1.3-3.10.x86_64",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.x86_64",
          "3WS:kdegraphics-7:3.1.3-3.10.i386",
          "3WS:kdegraphics-7:3.1.3-3.10.ia64",
          "3WS:kdegraphics-7:3.1.3-3.10.ppc",
          "3WS:kdegraphics-7:3.1.3-3.10.s390",
          "3WS:kdegraphics-7:3.1.3-3.10.s390x",
          "3WS:kdegraphics-7:3.1.3-3.10.src",
          "3WS:kdegraphics-7:3.1.3-3.10.x86_64",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-3461"
        },
        {
          "category": "external",
          "summary": "RHBZ#199111",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=199111"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-3461",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-3461"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-3461",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-3461"
        }
      ],
      "release_date": "2006-08-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-08-28T11:41:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "3AS:kdegraphics-7:3.1.3-3.10.i386",
            "3AS:kdegraphics-7:3.1.3-3.10.ia64",
            "3AS:kdegraphics-7:3.1.3-3.10.ppc",
            "3AS:kdegraphics-7:3.1.3-3.10.s390",
            "3AS:kdegraphics-7:3.1.3-3.10.s390x",
            "3AS:kdegraphics-7:3.1.3-3.10.src",
            "3AS:kdegraphics-7:3.1.3-3.10.x86_64",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.x86_64",
            "3Desktop:kdegraphics-7:3.1.3-3.10.i386",
            "3Desktop:kdegraphics-7:3.1.3-3.10.ia64",
            "3Desktop:kdegraphics-7:3.1.3-3.10.ppc",
            "3Desktop:kdegraphics-7:3.1.3-3.10.s390",
            "3Desktop:kdegraphics-7:3.1.3-3.10.s390x",
            "3Desktop:kdegraphics-7:3.1.3-3.10.src",
            "3Desktop:kdegraphics-7:3.1.3-3.10.x86_64",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.x86_64",
            "3ES:kdegraphics-7:3.1.3-3.10.i386",
            "3ES:kdegraphics-7:3.1.3-3.10.ia64",
            "3ES:kdegraphics-7:3.1.3-3.10.ppc",
            "3ES:kdegraphics-7:3.1.3-3.10.s390",
            "3ES:kdegraphics-7:3.1.3-3.10.s390x",
            "3ES:kdegraphics-7:3.1.3-3.10.src",
            "3ES:kdegraphics-7:3.1.3-3.10.x86_64",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.x86_64",
            "3WS:kdegraphics-7:3.1.3-3.10.i386",
            "3WS:kdegraphics-7:3.1.3-3.10.ia64",
            "3WS:kdegraphics-7:3.1.3-3.10.ppc",
            "3WS:kdegraphics-7:3.1.3-3.10.s390",
            "3WS:kdegraphics-7:3.1.3-3.10.s390x",
            "3WS:kdegraphics-7:3.1.3-3.10.src",
            "3WS:kdegraphics-7:3.1.3-3.10.x86_64",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0648"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Multiple libtiff flaws (CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)"
    },
    {
      "cve": "CVE-2006-3462",
      "discovery_date": "2006-07-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "199111"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Heap-based buffer overflow in the NeXT RLE decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors involving decoding large RLE images.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Multiple libtiff flaws (CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS:kdegraphics-7:3.1.3-3.10.i386",
          "3AS:kdegraphics-7:3.1.3-3.10.ia64",
          "3AS:kdegraphics-7:3.1.3-3.10.ppc",
          "3AS:kdegraphics-7:3.1.3-3.10.s390",
          "3AS:kdegraphics-7:3.1.3-3.10.s390x",
          "3AS:kdegraphics-7:3.1.3-3.10.src",
          "3AS:kdegraphics-7:3.1.3-3.10.x86_64",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.x86_64",
          "3Desktop:kdegraphics-7:3.1.3-3.10.i386",
          "3Desktop:kdegraphics-7:3.1.3-3.10.ia64",
          "3Desktop:kdegraphics-7:3.1.3-3.10.ppc",
          "3Desktop:kdegraphics-7:3.1.3-3.10.s390",
          "3Desktop:kdegraphics-7:3.1.3-3.10.s390x",
          "3Desktop:kdegraphics-7:3.1.3-3.10.src",
          "3Desktop:kdegraphics-7:3.1.3-3.10.x86_64",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.x86_64",
          "3ES:kdegraphics-7:3.1.3-3.10.i386",
          "3ES:kdegraphics-7:3.1.3-3.10.ia64",
          "3ES:kdegraphics-7:3.1.3-3.10.ppc",
          "3ES:kdegraphics-7:3.1.3-3.10.s390",
          "3ES:kdegraphics-7:3.1.3-3.10.s390x",
          "3ES:kdegraphics-7:3.1.3-3.10.src",
          "3ES:kdegraphics-7:3.1.3-3.10.x86_64",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.x86_64",
          "3WS:kdegraphics-7:3.1.3-3.10.i386",
          "3WS:kdegraphics-7:3.1.3-3.10.ia64",
          "3WS:kdegraphics-7:3.1.3-3.10.ppc",
          "3WS:kdegraphics-7:3.1.3-3.10.s390",
          "3WS:kdegraphics-7:3.1.3-3.10.s390x",
          "3WS:kdegraphics-7:3.1.3-3.10.src",
          "3WS:kdegraphics-7:3.1.3-3.10.x86_64",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-3462"
        },
        {
          "category": "external",
          "summary": "RHBZ#199111",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=199111"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-3462",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-3462"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-3462",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-3462"
        }
      ],
      "release_date": "2006-08-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-08-28T11:41:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "3AS:kdegraphics-7:3.1.3-3.10.i386",
            "3AS:kdegraphics-7:3.1.3-3.10.ia64",
            "3AS:kdegraphics-7:3.1.3-3.10.ppc",
            "3AS:kdegraphics-7:3.1.3-3.10.s390",
            "3AS:kdegraphics-7:3.1.3-3.10.s390x",
            "3AS:kdegraphics-7:3.1.3-3.10.src",
            "3AS:kdegraphics-7:3.1.3-3.10.x86_64",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.x86_64",
            "3Desktop:kdegraphics-7:3.1.3-3.10.i386",
            "3Desktop:kdegraphics-7:3.1.3-3.10.ia64",
            "3Desktop:kdegraphics-7:3.1.3-3.10.ppc",
            "3Desktop:kdegraphics-7:3.1.3-3.10.s390",
            "3Desktop:kdegraphics-7:3.1.3-3.10.s390x",
            "3Desktop:kdegraphics-7:3.1.3-3.10.src",
            "3Desktop:kdegraphics-7:3.1.3-3.10.x86_64",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.x86_64",
            "3ES:kdegraphics-7:3.1.3-3.10.i386",
            "3ES:kdegraphics-7:3.1.3-3.10.ia64",
            "3ES:kdegraphics-7:3.1.3-3.10.ppc",
            "3ES:kdegraphics-7:3.1.3-3.10.s390",
            "3ES:kdegraphics-7:3.1.3-3.10.s390x",
            "3ES:kdegraphics-7:3.1.3-3.10.src",
            "3ES:kdegraphics-7:3.1.3-3.10.x86_64",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.x86_64",
            "3WS:kdegraphics-7:3.1.3-3.10.i386",
            "3WS:kdegraphics-7:3.1.3-3.10.ia64",
            "3WS:kdegraphics-7:3.1.3-3.10.ppc",
            "3WS:kdegraphics-7:3.1.3-3.10.s390",
            "3WS:kdegraphics-7:3.1.3-3.10.s390x",
            "3WS:kdegraphics-7:3.1.3-3.10.src",
            "3WS:kdegraphics-7:3.1.3-3.10.x86_64",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0648"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Multiple libtiff flaws (CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)"
    },
    {
      "cve": "CVE-2006-3463",
      "discovery_date": "2006-07-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "199111"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The EstimateStripByteCounts function in TIFF library (libtiff) before 3.8.2 uses a 16-bit unsigned short when iterating over an unsigned 32-bit value, which allows context-dependent attackers to cause a denial of service via a large td_nstrips value, which triggers an infinite loop.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Multiple libtiff flaws (CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS:kdegraphics-7:3.1.3-3.10.i386",
          "3AS:kdegraphics-7:3.1.3-3.10.ia64",
          "3AS:kdegraphics-7:3.1.3-3.10.ppc",
          "3AS:kdegraphics-7:3.1.3-3.10.s390",
          "3AS:kdegraphics-7:3.1.3-3.10.s390x",
          "3AS:kdegraphics-7:3.1.3-3.10.src",
          "3AS:kdegraphics-7:3.1.3-3.10.x86_64",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.x86_64",
          "3Desktop:kdegraphics-7:3.1.3-3.10.i386",
          "3Desktop:kdegraphics-7:3.1.3-3.10.ia64",
          "3Desktop:kdegraphics-7:3.1.3-3.10.ppc",
          "3Desktop:kdegraphics-7:3.1.3-3.10.s390",
          "3Desktop:kdegraphics-7:3.1.3-3.10.s390x",
          "3Desktop:kdegraphics-7:3.1.3-3.10.src",
          "3Desktop:kdegraphics-7:3.1.3-3.10.x86_64",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.x86_64",
          "3ES:kdegraphics-7:3.1.3-3.10.i386",
          "3ES:kdegraphics-7:3.1.3-3.10.ia64",
          "3ES:kdegraphics-7:3.1.3-3.10.ppc",
          "3ES:kdegraphics-7:3.1.3-3.10.s390",
          "3ES:kdegraphics-7:3.1.3-3.10.s390x",
          "3ES:kdegraphics-7:3.1.3-3.10.src",
          "3ES:kdegraphics-7:3.1.3-3.10.x86_64",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.x86_64",
          "3WS:kdegraphics-7:3.1.3-3.10.i386",
          "3WS:kdegraphics-7:3.1.3-3.10.ia64",
          "3WS:kdegraphics-7:3.1.3-3.10.ppc",
          "3WS:kdegraphics-7:3.1.3-3.10.s390",
          "3WS:kdegraphics-7:3.1.3-3.10.s390x",
          "3WS:kdegraphics-7:3.1.3-3.10.src",
          "3WS:kdegraphics-7:3.1.3-3.10.x86_64",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-3463"
        },
        {
          "category": "external",
          "summary": "RHBZ#199111",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=199111"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-3463",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-3463"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-3463",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-3463"
        }
      ],
      "release_date": "2006-08-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-08-28T11:41:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "3AS:kdegraphics-7:3.1.3-3.10.i386",
            "3AS:kdegraphics-7:3.1.3-3.10.ia64",
            "3AS:kdegraphics-7:3.1.3-3.10.ppc",
            "3AS:kdegraphics-7:3.1.3-3.10.s390",
            "3AS:kdegraphics-7:3.1.3-3.10.s390x",
            "3AS:kdegraphics-7:3.1.3-3.10.src",
            "3AS:kdegraphics-7:3.1.3-3.10.x86_64",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.x86_64",
            "3Desktop:kdegraphics-7:3.1.3-3.10.i386",
            "3Desktop:kdegraphics-7:3.1.3-3.10.ia64",
            "3Desktop:kdegraphics-7:3.1.3-3.10.ppc",
            "3Desktop:kdegraphics-7:3.1.3-3.10.s390",
            "3Desktop:kdegraphics-7:3.1.3-3.10.s390x",
            "3Desktop:kdegraphics-7:3.1.3-3.10.src",
            "3Desktop:kdegraphics-7:3.1.3-3.10.x86_64",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.x86_64",
            "3ES:kdegraphics-7:3.1.3-3.10.i386",
            "3ES:kdegraphics-7:3.1.3-3.10.ia64",
            "3ES:kdegraphics-7:3.1.3-3.10.ppc",
            "3ES:kdegraphics-7:3.1.3-3.10.s390",
            "3ES:kdegraphics-7:3.1.3-3.10.s390x",
            "3ES:kdegraphics-7:3.1.3-3.10.src",
            "3ES:kdegraphics-7:3.1.3-3.10.x86_64",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.x86_64",
            "3WS:kdegraphics-7:3.1.3-3.10.i386",
            "3WS:kdegraphics-7:3.1.3-3.10.ia64",
            "3WS:kdegraphics-7:3.1.3-3.10.ppc",
            "3WS:kdegraphics-7:3.1.3-3.10.s390",
            "3WS:kdegraphics-7:3.1.3-3.10.s390x",
            "3WS:kdegraphics-7:3.1.3-3.10.src",
            "3WS:kdegraphics-7:3.1.3-3.10.x86_64",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0648"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Multiple libtiff flaws (CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)"
    },
    {
      "cve": "CVE-2006-3464",
      "discovery_date": "2006-07-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "199111"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to pass numeric range checks and possibly execute code, and trigger assert errors, via large offset values in a TIFF directory that lead to an integer overflow and other unspecified vectors involving \"unchecked arithmetic operations\".",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Multiple libtiff flaws (CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS:kdegraphics-7:3.1.3-3.10.i386",
          "3AS:kdegraphics-7:3.1.3-3.10.ia64",
          "3AS:kdegraphics-7:3.1.3-3.10.ppc",
          "3AS:kdegraphics-7:3.1.3-3.10.s390",
          "3AS:kdegraphics-7:3.1.3-3.10.s390x",
          "3AS:kdegraphics-7:3.1.3-3.10.src",
          "3AS:kdegraphics-7:3.1.3-3.10.x86_64",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.x86_64",
          "3Desktop:kdegraphics-7:3.1.3-3.10.i386",
          "3Desktop:kdegraphics-7:3.1.3-3.10.ia64",
          "3Desktop:kdegraphics-7:3.1.3-3.10.ppc",
          "3Desktop:kdegraphics-7:3.1.3-3.10.s390",
          "3Desktop:kdegraphics-7:3.1.3-3.10.s390x",
          "3Desktop:kdegraphics-7:3.1.3-3.10.src",
          "3Desktop:kdegraphics-7:3.1.3-3.10.x86_64",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.x86_64",
          "3ES:kdegraphics-7:3.1.3-3.10.i386",
          "3ES:kdegraphics-7:3.1.3-3.10.ia64",
          "3ES:kdegraphics-7:3.1.3-3.10.ppc",
          "3ES:kdegraphics-7:3.1.3-3.10.s390",
          "3ES:kdegraphics-7:3.1.3-3.10.s390x",
          "3ES:kdegraphics-7:3.1.3-3.10.src",
          "3ES:kdegraphics-7:3.1.3-3.10.x86_64",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.x86_64",
          "3WS:kdegraphics-7:3.1.3-3.10.i386",
          "3WS:kdegraphics-7:3.1.3-3.10.ia64",
          "3WS:kdegraphics-7:3.1.3-3.10.ppc",
          "3WS:kdegraphics-7:3.1.3-3.10.s390",
          "3WS:kdegraphics-7:3.1.3-3.10.s390x",
          "3WS:kdegraphics-7:3.1.3-3.10.src",
          "3WS:kdegraphics-7:3.1.3-3.10.x86_64",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-3464"
        },
        {
          "category": "external",
          "summary": "RHBZ#199111",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=199111"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-3464",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-3464"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-3464",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-3464"
        }
      ],
      "release_date": "2006-08-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-08-28T11:41:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "3AS:kdegraphics-7:3.1.3-3.10.i386",
            "3AS:kdegraphics-7:3.1.3-3.10.ia64",
            "3AS:kdegraphics-7:3.1.3-3.10.ppc",
            "3AS:kdegraphics-7:3.1.3-3.10.s390",
            "3AS:kdegraphics-7:3.1.3-3.10.s390x",
            "3AS:kdegraphics-7:3.1.3-3.10.src",
            "3AS:kdegraphics-7:3.1.3-3.10.x86_64",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.x86_64",
            "3Desktop:kdegraphics-7:3.1.3-3.10.i386",
            "3Desktop:kdegraphics-7:3.1.3-3.10.ia64",
            "3Desktop:kdegraphics-7:3.1.3-3.10.ppc",
            "3Desktop:kdegraphics-7:3.1.3-3.10.s390",
            "3Desktop:kdegraphics-7:3.1.3-3.10.s390x",
            "3Desktop:kdegraphics-7:3.1.3-3.10.src",
            "3Desktop:kdegraphics-7:3.1.3-3.10.x86_64",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.x86_64",
            "3ES:kdegraphics-7:3.1.3-3.10.i386",
            "3ES:kdegraphics-7:3.1.3-3.10.ia64",
            "3ES:kdegraphics-7:3.1.3-3.10.ppc",
            "3ES:kdegraphics-7:3.1.3-3.10.s390",
            "3ES:kdegraphics-7:3.1.3-3.10.s390x",
            "3ES:kdegraphics-7:3.1.3-3.10.src",
            "3ES:kdegraphics-7:3.1.3-3.10.x86_64",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.x86_64",
            "3WS:kdegraphics-7:3.1.3-3.10.i386",
            "3WS:kdegraphics-7:3.1.3-3.10.ia64",
            "3WS:kdegraphics-7:3.1.3-3.10.ppc",
            "3WS:kdegraphics-7:3.1.3-3.10.s390",
            "3WS:kdegraphics-7:3.1.3-3.10.s390x",
            "3WS:kdegraphics-7:3.1.3-3.10.src",
            "3WS:kdegraphics-7:3.1.3-3.10.x86_64",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0648"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Multiple libtiff flaws (CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)"
    },
    {
      "cve": "CVE-2006-3465",
      "discovery_date": "2006-07-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "199111"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the custom tag support for the TIFF library (libtiff) before 3.8.2 allows remote attackers to cause a denial of service (instability or crash) and execute arbitrary code via unknown vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Multiple libtiff flaws (CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS:kdegraphics-7:3.1.3-3.10.i386",
          "3AS:kdegraphics-7:3.1.3-3.10.ia64",
          "3AS:kdegraphics-7:3.1.3-3.10.ppc",
          "3AS:kdegraphics-7:3.1.3-3.10.s390",
          "3AS:kdegraphics-7:3.1.3-3.10.s390x",
          "3AS:kdegraphics-7:3.1.3-3.10.src",
          "3AS:kdegraphics-7:3.1.3-3.10.x86_64",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3AS:kdegraphics-devel-7:3.1.3-3.10.x86_64",
          "3Desktop:kdegraphics-7:3.1.3-3.10.i386",
          "3Desktop:kdegraphics-7:3.1.3-3.10.ia64",
          "3Desktop:kdegraphics-7:3.1.3-3.10.ppc",
          "3Desktop:kdegraphics-7:3.1.3-3.10.s390",
          "3Desktop:kdegraphics-7:3.1.3-3.10.s390x",
          "3Desktop:kdegraphics-7:3.1.3-3.10.src",
          "3Desktop:kdegraphics-7:3.1.3-3.10.x86_64",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3Desktop:kdegraphics-devel-7:3.1.3-3.10.x86_64",
          "3ES:kdegraphics-7:3.1.3-3.10.i386",
          "3ES:kdegraphics-7:3.1.3-3.10.ia64",
          "3ES:kdegraphics-7:3.1.3-3.10.ppc",
          "3ES:kdegraphics-7:3.1.3-3.10.s390",
          "3ES:kdegraphics-7:3.1.3-3.10.s390x",
          "3ES:kdegraphics-7:3.1.3-3.10.src",
          "3ES:kdegraphics-7:3.1.3-3.10.x86_64",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3ES:kdegraphics-devel-7:3.1.3-3.10.x86_64",
          "3WS:kdegraphics-7:3.1.3-3.10.i386",
          "3WS:kdegraphics-7:3.1.3-3.10.ia64",
          "3WS:kdegraphics-7:3.1.3-3.10.ppc",
          "3WS:kdegraphics-7:3.1.3-3.10.s390",
          "3WS:kdegraphics-7:3.1.3-3.10.s390x",
          "3WS:kdegraphics-7:3.1.3-3.10.src",
          "3WS:kdegraphics-7:3.1.3-3.10.x86_64",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
          "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.i386",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.ia64",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.ppc",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.s390",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.s390x",
          "3WS:kdegraphics-devel-7:3.1.3-3.10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-3465"
        },
        {
          "category": "external",
          "summary": "RHBZ#199111",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=199111"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-3465",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-3465"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-3465",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-3465"
        }
      ],
      "release_date": "2006-08-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-08-28T11:41:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "3AS:kdegraphics-7:3.1.3-3.10.i386",
            "3AS:kdegraphics-7:3.1.3-3.10.ia64",
            "3AS:kdegraphics-7:3.1.3-3.10.ppc",
            "3AS:kdegraphics-7:3.1.3-3.10.s390",
            "3AS:kdegraphics-7:3.1.3-3.10.s390x",
            "3AS:kdegraphics-7:3.1.3-3.10.src",
            "3AS:kdegraphics-7:3.1.3-3.10.x86_64",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3AS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3AS:kdegraphics-devel-7:3.1.3-3.10.x86_64",
            "3Desktop:kdegraphics-7:3.1.3-3.10.i386",
            "3Desktop:kdegraphics-7:3.1.3-3.10.ia64",
            "3Desktop:kdegraphics-7:3.1.3-3.10.ppc",
            "3Desktop:kdegraphics-7:3.1.3-3.10.s390",
            "3Desktop:kdegraphics-7:3.1.3-3.10.s390x",
            "3Desktop:kdegraphics-7:3.1.3-3.10.src",
            "3Desktop:kdegraphics-7:3.1.3-3.10.x86_64",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3Desktop:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3Desktop:kdegraphics-devel-7:3.1.3-3.10.x86_64",
            "3ES:kdegraphics-7:3.1.3-3.10.i386",
            "3ES:kdegraphics-7:3.1.3-3.10.ia64",
            "3ES:kdegraphics-7:3.1.3-3.10.ppc",
            "3ES:kdegraphics-7:3.1.3-3.10.s390",
            "3ES:kdegraphics-7:3.1.3-3.10.s390x",
            "3ES:kdegraphics-7:3.1.3-3.10.src",
            "3ES:kdegraphics-7:3.1.3-3.10.x86_64",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3ES:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3ES:kdegraphics-devel-7:3.1.3-3.10.x86_64",
            "3WS:kdegraphics-7:3.1.3-3.10.i386",
            "3WS:kdegraphics-7:3.1.3-3.10.ia64",
            "3WS:kdegraphics-7:3.1.3-3.10.ppc",
            "3WS:kdegraphics-7:3.1.3-3.10.s390",
            "3WS:kdegraphics-7:3.1.3-3.10.s390x",
            "3WS:kdegraphics-7:3.1.3-3.10.src",
            "3WS:kdegraphics-7:3.1.3-3.10.x86_64",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.i386",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ia64",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.ppc",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.s390x",
            "3WS:kdegraphics-debuginfo-7:3.1.3-3.10.x86_64",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.i386",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.ia64",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.ppc",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.s390",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.s390x",
            "3WS:kdegraphics-devel-7:3.1.3-3.10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0648"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Multiple libtiff flaws (CVE-2006-3460 CVE-2006-3461 CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)"
    }
  ]
}

cve-2006-2025

Vulnerability from cvelistv5

Published

2006-04-25 23:00

Modified

2024-08-07 17:35

Severity ?

Summary

Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted TIFF image.

References

▼	URL	Tags
	http://www.vupen.com/english/advisories/2006/1563	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/20210	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/19949	third-party-advisory, x_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/26134	vdb-entry, x_refsource_XF
	https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189933	x_refsource_CONFIRM
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-103099-1	vendor-advisory, x_refsource_SUNALERT
	https://usn.ubuntu.com/277-1/	vendor-advisory, x_refsource_UBUNTU
	http://www.gentoo.org/security/en/glsa/glsa-200605-17.xml	vendor-advisory, x_refsource_GENTOO
	http://secunia.com/advisories/20667	third-party-advisory, x_refsource_SECUNIA
	http://bugzilla.remotesensing.org/show_bug.cgi?id=1102	x_refsource_MISC
	http://secunia.com/advisories/19936	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/19964	third-party-advisory, x_refsource_SECUNIA
	http://sunsolve.sun.com/search/document.do?assetkey=1-66-201332-1	vendor-advisory, x_refsource_SUNALERT
	http://www.trustix.org/errata/2006/0024	vendor-advisory, x_refsource_TRUSTIX
	http://secunia.com/advisories/20345	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2006/dsa-1054	vendor-advisory, x_refsource_DEBIAN
	ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc	vendor-advisory, x_refsource_SGI
	http://www.securityfocus.com/bid/17732	vdb-entry, x_refsource_BID
	http://support.avaya.com/elmodocs2/security/ASA-2006-119.htm	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2006-0425.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/19838	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10593	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/20021	third-party-advisory, x_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=MDKSA-2006:082	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/19897	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/20023	third-party-advisory, x_refsource_SECUNIA
	http://www.novell.com/linux/security/advisories/2006_04_28.html	vendor-advisory, x_refsource_SUSE

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T17:35:31.264Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ADV-2006-1563",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/1563"
          },
          {
            "name": "20210",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20210"
          },
          {
            "name": "19949",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19949"
          },
          {
            "name": "libtiff-tifffetchdata-overflow(26134)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26134"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189933"
          },
          {
            "name": "103099",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103099-1"
          },
          {
            "name": "USN-277-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/277-1/"
          },
          {
            "name": "GLSA-200605-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200605-17.xml"
          },
          {
            "name": "20667",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20667"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://bugzilla.remotesensing.org/show_bug.cgi?id=1102"
          },
          {
            "name": "19936",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19936"
          },
          {
            "name": "19964",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19964"
          },
          {
            "name": "201332",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201332-1"
          },
          {
            "name": "2006-0024",
            "tags": [
              "vendor-advisory",
              "x_refsource_TRUSTIX",
              "x_transferred"
            ],
            "url": "http://www.trustix.org/errata/2006/0024"
          },
          {
            "name": "20345",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20345"
          },
          {
            "name": "DSA-1054",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1054"
          },
          {
            "name": "20060501-01-U",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc"
          },
          {
            "name": "17732",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/17732"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-119.htm"
          },
          {
            "name": "RHSA-2006:0425",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0425.html"
          },
          {
            "name": "19838",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19838"
          },
          {
            "name": "oval:org.mitre.oval:def:10593",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10593"
          },
          {
            "name": "20021",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20021"
          },
          {
            "name": "MDKSA-2006:082",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:082"
          },
          {
            "name": "19897",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19897"
          },
          {
            "name": "20023",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20023"
          },
          {
            "name": "SUSE-SR:2006:009",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2006_04_28.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-04-25T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted TIFF image."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-03T20:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "ADV-2006-1563",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/1563"
        },
        {
          "name": "20210",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20210"
        },
        {
          "name": "19949",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19949"
        },
        {
          "name": "libtiff-tifffetchdata-overflow(26134)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26134"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189933"
        },
        {
          "name": "103099",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103099-1"
        },
        {
          "name": "USN-277-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/277-1/"
        },
        {
          "name": "GLSA-200605-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200605-17.xml"
        },
        {
          "name": "20667",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20667"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://bugzilla.remotesensing.org/show_bug.cgi?id=1102"
        },
        {
          "name": "19936",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19936"
        },
        {
          "name": "19964",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19964"
        },
        {
          "name": "201332",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201332-1"
        },
        {
          "name": "2006-0024",
          "tags": [
            "vendor-advisory",
            "x_refsource_TRUSTIX"
          ],
          "url": "http://www.trustix.org/errata/2006/0024"
        },
        {
          "name": "20345",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20345"
        },
        {
          "name": "DSA-1054",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1054"
        },
        {
          "name": "20060501-01-U",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc"
        },
        {
          "name": "17732",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/17732"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-119.htm"
        },
        {
          "name": "RHSA-2006:0425",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0425.html"
        },
        {
          "name": "19838",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19838"
        },
        {
          "name": "oval:org.mitre.oval:def:10593",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10593"
        },
        {
          "name": "20021",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20021"
        },
        {
          "name": "MDKSA-2006:082",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:082"
        },
        {
          "name": "19897",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19897"
        },
        {
          "name": "20023",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20023"
        },
        {
          "name": "SUSE-SR:2006:009",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2006_04_28.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-2025",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted TIFF image."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "ADV-2006-1563",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/1563"
            },
            {
              "name": "20210",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20210"
            },
            {
              "name": "19949",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19949"
            },
            {
              "name": "libtiff-tifffetchdata-overflow(26134)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26134"
            },
            {
              "name": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189933",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189933"
            },
            {
              "name": "103099",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103099-1"
            },
            {
              "name": "USN-277-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/277-1/"
            },
            {
              "name": "GLSA-200605-17",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200605-17.xml"
            },
            {
              "name": "20667",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20667"
            },
            {
              "name": "http://bugzilla.remotesensing.org/show_bug.cgi?id=1102",
              "refsource": "MISC",
              "url": "http://bugzilla.remotesensing.org/show_bug.cgi?id=1102"
            },
            {
              "name": "19936",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19936"
            },
            {
              "name": "19964",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19964"
            },
            {
              "name": "201332",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201332-1"
            },
            {
              "name": "2006-0024",
              "refsource": "TRUSTIX",
              "url": "http://www.trustix.org/errata/2006/0024"
            },
            {
              "name": "20345",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20345"
            },
            {
              "name": "DSA-1054",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1054"
            },
            {
              "name": "20060501-01-U",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc"
            },
            {
              "name": "17732",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/17732"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2006-119.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-119.htm"
            },
            {
              "name": "RHSA-2006:0425",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0425.html"
            },
            {
              "name": "19838",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19838"
            },
            {
              "name": "oval:org.mitre.oval:def:10593",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10593"
            },
            {
              "name": "20021",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20021"
            },
            {
              "name": "MDKSA-2006:082",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:082"
            },
            {
              "name": "19897",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19897"
            },
            {
              "name": "20023",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20023"
            },
            {
              "name": "SUSE-SR:2006:009",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2006_04_28.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-2025",
    "datePublished": "2006-04-25T23:00:00",
    "dateReserved": "2006-04-25T00:00:00",
    "dateUpdated": "2024-08-07T17:35:31.264Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2006-3460

Vulnerability from cvelistv5

Published

2006-08-03 01:00

Modified

2024-08-07 18:30

Severity ?

Summary

Heap-based buffer overflow in the JPEG decoder in the TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an encoded JPEG stream that is longer than the scan line size (TiffScanLineSize).

References

▼	URL	Tags
	ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P	vendor-advisory, x_refsource_SGI
	http://www.vupen.com/english/advisories/2007/3486	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/21501	third-party-advisory, x_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=MDKSA-2006:136	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/21537	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21632	third-party-advisory, x_refsource_SECUNIA
	http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml	vendor-advisory, x_refsource_GENTOO
	http://secunia.com/advisories/21338	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/usn-330-1	vendor-advisory, x_refsource_UBUNTU
	http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2006/3101	vdb-entry, x_refsource_VUPEN
	http://securitytracker.com/id?1016628	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2006/dsa-1137	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/21370	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21598	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2006-0648.html	vendor-advisory, x_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=MDKSA-2006:137	vendor-advisory, x_refsource_MANDRIVA
	http://www.securityfocus.com/bid/19289	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/27222	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2007/4034	vdb-entry, x_refsource_VUPEN
	http://www.novell.com/linux/security/advisories/2006_44_libtiff.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/21290	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21274	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2006/3105	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/27181	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2006-0603.html	vendor-advisory, x_refsource_REDHAT
	ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc	vendor-advisory, x_refsource_SGI
	http://secunia.com/advisories/21304	third-party-advisory, x_refsource_SECUNIA
	http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.536600	vendor-advisory, x_refsource_SLACKWARE
	https://issues.rpath.com/browse/RPL-558	x_refsource_CONFIRM
	http://secunia.com/advisories/27832	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21346	third-party-advisory, x_refsource_SECUNIA
	http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1	vendor-advisory, x_refsource_SUNALERT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11265	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/21319	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21392	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21334	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/19288	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/22036	third-party-advisory, x_refsource_SECUNIA
	http://lwn.net/Alerts/194228/	vendor-advisory, x_refsource_TRUSTIX
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1	vendor-advisory, x_refsource_SUNALERT

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T18:30:33.586Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20060801-01-P",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P"
          },
          {
            "name": "ADV-2007-3486",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/3486"
          },
          {
            "name": "21501",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21501"
          },
          {
            "name": "MDKSA-2006:136",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:136"
          },
          {
            "name": "21537",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21537"
          },
          {
            "name": "21632",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21632"
          },
          {
            "name": "GLSA-200608-07",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml"
          },
          {
            "name": "21338",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21338"
          },
          {
            "name": "USN-330-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-330-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm"
          },
          {
            "name": "ADV-2006-3101",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/3101"
          },
          {
            "name": "1016628",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016628"
          },
          {
            "name": "DSA-1137",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1137"
          },
          {
            "name": "21370",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21370"
          },
          {
            "name": "21598",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21598"
          },
          {
            "name": "RHSA-2006:0648",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0648.html"
          },
          {
            "name": "MDKSA-2006:137",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:137"
          },
          {
            "name": "19289",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/19289"
          },
          {
            "name": "27222",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27222"
          },
          {
            "name": "ADV-2007-4034",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/4034"
          },
          {
            "name": "SUSE-SA:2006:044",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2006_44_libtiff.html"
          },
          {
            "name": "21290",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21290"
          },
          {
            "name": "21274",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21274"
          },
          {
            "name": "ADV-2006-3105",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/3105"
          },
          {
            "name": "27181",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27181"
          },
          {
            "name": "RHSA-2006:0603",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0603.html"
          },
          {
            "name": "20060901-01-P",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc"
          },
          {
            "name": "21304",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21304"
          },
          {
            "name": "SSA:2006-230-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.536600"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-558"
          },
          {
            "name": "27832",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27832"
          },
          {
            "name": "21346",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21346"
          },
          {
            "name": "201331",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1"
          },
          {
            "name": "oval:org.mitre.oval:def:11265",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11265"
          },
          {
            "name": "21319",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21319"
          },
          {
            "name": "21392",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21392"
          },
          {
            "name": "21334",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21334"
          },
          {
            "name": "19288",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/19288"
          },
          {
            "name": "22036",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22036"
          },
          {
            "name": "2006-0044",
            "tags": [
              "vendor-advisory",
              "x_refsource_TRUSTIX",
              "x_transferred"
            ],
            "url": "http://lwn.net/Alerts/194228/"
          },
          {
            "name": "103160",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-08-01T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in the JPEG decoder in the TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an encoded JPEG stream that is longer than the scan line size (TiffScanLineSize)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-10T00:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "20060801-01-P",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P"
        },
        {
          "name": "ADV-2007-3486",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/3486"
        },
        {
          "name": "21501",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21501"
        },
        {
          "name": "MDKSA-2006:136",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:136"
        },
        {
          "name": "21537",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21537"
        },
        {
          "name": "21632",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21632"
        },
        {
          "name": "GLSA-200608-07",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml"
        },
        {
          "name": "21338",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21338"
        },
        {
          "name": "USN-330-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-330-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm"
        },
        {
          "name": "ADV-2006-3101",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/3101"
        },
        {
          "name": "1016628",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016628"
        },
        {
          "name": "DSA-1137",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1137"
        },
        {
          "name": "21370",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21370"
        },
        {
          "name": "21598",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21598"
        },
        {
          "name": "RHSA-2006:0648",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0648.html"
        },
        {
          "name": "MDKSA-2006:137",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:137"
        },
        {
          "name": "19289",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/19289"
        },
        {
          "name": "27222",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27222"
        },
        {
          "name": "ADV-2007-4034",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/4034"
        },
        {
          "name": "SUSE-SA:2006:044",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2006_44_libtiff.html"
        },
        {
          "name": "21290",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21290"
        },
        {
          "name": "21274",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21274"
        },
        {
          "name": "ADV-2006-3105",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/3105"
        },
        {
          "name": "27181",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27181"
        },
        {
          "name": "RHSA-2006:0603",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0603.html"
        },
        {
          "name": "20060901-01-P",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc"
        },
        {
          "name": "21304",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21304"
        },
        {
          "name": "SSA:2006-230-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.536600"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-558"
        },
        {
          "name": "27832",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27832"
        },
        {
          "name": "21346",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21346"
        },
        {
          "name": "201331",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1"
        },
        {
          "name": "oval:org.mitre.oval:def:11265",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11265"
        },
        {
          "name": "21319",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21319"
        },
        {
          "name": "21392",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21392"
        },
        {
          "name": "21334",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21334"
        },
        {
          "name": "19288",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/19288"
        },
        {
          "name": "22036",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22036"
        },
        {
          "name": "2006-0044",
          "tags": [
            "vendor-advisory",
            "x_refsource_TRUSTIX"
          ],
          "url": "http://lwn.net/Alerts/194228/"
        },
        {
          "name": "103160",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2006-3460",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in the JPEG decoder in the TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an encoded JPEG stream that is longer than the scan line size (TiffScanLineSize)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20060801-01-P",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P"
            },
            {
              "name": "ADV-2007-3486",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/3486"
            },
            {
              "name": "21501",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21501"
            },
            {
              "name": "MDKSA-2006:136",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:136"
            },
            {
              "name": "21537",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21537"
            },
            {
              "name": "21632",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21632"
            },
            {
              "name": "GLSA-200608-07",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml"
            },
            {
              "name": "21338",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21338"
            },
            {
              "name": "USN-330-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-330-1"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm"
            },
            {
              "name": "ADV-2006-3101",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/3101"
            },
            {
              "name": "1016628",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016628"
            },
            {
              "name": "DSA-1137",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1137"
            },
            {
              "name": "21370",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21370"
            },
            {
              "name": "21598",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21598"
            },
            {
              "name": "RHSA-2006:0648",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0648.html"
            },
            {
              "name": "MDKSA-2006:137",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:137"
            },
            {
              "name": "19289",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/19289"
            },
            {
              "name": "27222",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27222"
            },
            {
              "name": "ADV-2007-4034",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/4034"
            },
            {
              "name": "SUSE-SA:2006:044",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2006_44_libtiff.html"
            },
            {
              "name": "21290",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21290"
            },
            {
              "name": "21274",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21274"
            },
            {
              "name": "ADV-2006-3105",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/3105"
            },
            {
              "name": "27181",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27181"
            },
            {
              "name": "RHSA-2006:0603",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0603.html"
            },
            {
              "name": "20060901-01-P",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc"
            },
            {
              "name": "21304",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21304"
            },
            {
              "name": "SSA:2006-230-01",
              "refsource": "SLACKWARE",
              "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.536600"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-558",
              "refsource": "CONFIRM",
              "url": "https://issues.rpath.com/browse/RPL-558"
            },
            {
              "name": "27832",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27832"
            },
            {
              "name": "21346",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21346"
            },
            {
              "name": "201331",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1"
            },
            {
              "name": "oval:org.mitre.oval:def:11265",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11265"
            },
            {
              "name": "21319",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21319"
            },
            {
              "name": "21392",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21392"
            },
            {
              "name": "21334",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21334"
            },
            {
              "name": "19288",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/19288"
            },
            {
              "name": "22036",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22036"
            },
            {
              "name": "2006-0044",
              "refsource": "TRUSTIX",
              "url": "http://lwn.net/Alerts/194228/"
            },
            {
              "name": "103160",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2006-3460",
    "datePublished": "2006-08-03T01:00:00",
    "dateReserved": "2006-07-10T00:00:00",
    "dateUpdated": "2024-08-07T18:30:33.586Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2006-3459

Vulnerability from cvelistv5

Published

2006-08-03 01:00

Modified

2024-08-07 18:30

Severity ?

Summary

Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow context-dependent attackers to execute arbitrary code or cause a denial of service via unspecified vectors, including a large tdir_count value in the TIFFFetchShortPair function in tif_dirread.c.

References

▼	URL	Tags
	ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P	vendor-advisory, x_refsource_SGI
	http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html	vendor-advisory, x_refsource_APPLE
	http://www.vupen.com/english/advisories/2007/3486	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/21501	third-party-advisory, x_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=MDKSA-2006:136	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/21537	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21632	third-party-advisory, x_refsource_SECUNIA
	http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml	vendor-advisory, x_refsource_GENTOO
	http://secunia.com/advisories/21338	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/usn-330-1	vendor-advisory, x_refsource_UBUNTU
	http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2006/3101	vdb-entry, x_refsource_VUPEN
	http://securitytracker.com/id?1016628	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/21253	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2006/dsa-1137	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/21370	third-party-advisory, x_refsource_SECUNIA
	http://securitytracker.com/id?1016671	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/21598	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2006-0648.html	vendor-advisory, x_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=MDKSA-2006:137	vendor-advisory, x_refsource_MANDRIVA
	http://www.securityfocus.com/bid/19289	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/27222	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2007/4034	vdb-entry, x_refsource_VUPEN
	http://www.us-cert.gov/cas/techalerts/TA06-214A.html	third-party-advisory, x_refsource_CERT
	http://www.novell.com/linux/security/advisories/2006_44_libtiff.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/21290	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11497	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/21274	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2006/3105	vdb-entry, x_refsource_VUPEN
	http://secunia.com/blog/76	x_refsource_MISC
	http://secunia.com/advisories/27181	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2006-0603.html	vendor-advisory, x_refsource_REDHAT
	ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc	vendor-advisory, x_refsource_SGI
	http://secunia.com/advisories/21304	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/19283	vdb-entry, x_refsource_BID
	http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.536600	vendor-advisory, x_refsource_SLACKWARE
	https://issues.rpath.com/browse/RPL-558	x_refsource_CONFIRM
	http://secunia.com/advisories/27832	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21346	third-party-advisory, x_refsource_SECUNIA
	http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1	vendor-advisory, x_refsource_SUNALERT
	http://secunia.com/advisories/21319	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21392	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21334	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/22036	third-party-advisory, x_refsource_SECUNIA
	http://www.osvdb.org/27723	vdb-entry, x_refsource_OSVDB
	http://lwn.net/Alerts/194228/	vendor-advisory, x_refsource_TRUSTIX
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1	vendor-advisory, x_refsource_SUNALERT

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T18:30:33.954Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20060801-01-P",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P"
          },
          {
            "name": "APPLE-SA-2006-08-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html"
          },
          {
            "name": "ADV-2007-3486",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/3486"
          },
          {
            "name": "21501",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21501"
          },
          {
            "name": "MDKSA-2006:136",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:136"
          },
          {
            "name": "21537",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21537"
          },
          {
            "name": "21632",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21632"
          },
          {
            "name": "GLSA-200608-07",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml"
          },
          {
            "name": "21338",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21338"
          },
          {
            "name": "USN-330-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-330-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm"
          },
          {
            "name": "ADV-2006-3101",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/3101"
          },
          {
            "name": "1016628",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016628"
          },
          {
            "name": "21253",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21253"
          },
          {
            "name": "DSA-1137",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1137"
          },
          {
            "name": "21370",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21370"
          },
          {
            "name": "1016671",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016671"
          },
          {
            "name": "21598",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21598"
          },
          {
            "name": "RHSA-2006:0648",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0648.html"
          },
          {
            "name": "MDKSA-2006:137",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:137"
          },
          {
            "name": "19289",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/19289"
          },
          {
            "name": "27222",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27222"
          },
          {
            "name": "ADV-2007-4034",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/4034"
          },
          {
            "name": "TA06-214A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA06-214A.html"
          },
          {
            "name": "SUSE-SA:2006:044",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2006_44_libtiff.html"
          },
          {
            "name": "21290",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21290"
          },
          {
            "name": "oval:org.mitre.oval:def:11497",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11497"
          },
          {
            "name": "21274",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21274"
          },
          {
            "name": "ADV-2006-3105",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/3105"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://secunia.com/blog/76"
          },
          {
            "name": "27181",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27181"
          },
          {
            "name": "RHSA-2006:0603",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0603.html"
          },
          {
            "name": "20060901-01-P",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc"
          },
          {
            "name": "21304",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21304"
          },
          {
            "name": "19283",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/19283"
          },
          {
            "name": "SSA:2006-230-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.536600"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-558"
          },
          {
            "name": "27832",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27832"
          },
          {
            "name": "21346",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21346"
          },
          {
            "name": "201331",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1"
          },
          {
            "name": "21319",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21319"
          },
          {
            "name": "21392",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21392"
          },
          {
            "name": "21334",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21334"
          },
          {
            "name": "22036",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22036"
          },
          {
            "name": "27723",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/27723"
          },
          {
            "name": "2006-0044",
            "tags": [
              "vendor-advisory",
              "x_refsource_TRUSTIX",
              "x_transferred"
            ],
            "url": "http://lwn.net/Alerts/194228/"
          },
          {
            "name": "103160",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-08-01T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow context-dependent attackers to execute arbitrary code or cause a denial of service via unspecified vectors, including a large tdir_count value in the TIFFFetchShortPair function in tif_dirread.c."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-10T00:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "20060801-01-P",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P"
        },
        {
          "name": "APPLE-SA-2006-08-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html"
        },
        {
          "name": "ADV-2007-3486",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/3486"
        },
        {
          "name": "21501",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21501"
        },
        {
          "name": "MDKSA-2006:136",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:136"
        },
        {
          "name": "21537",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21537"
        },
        {
          "name": "21632",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21632"
        },
        {
          "name": "GLSA-200608-07",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml"
        },
        {
          "name": "21338",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21338"
        },
        {
          "name": "USN-330-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-330-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm"
        },
        {
          "name": "ADV-2006-3101",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/3101"
        },
        {
          "name": "1016628",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016628"
        },
        {
          "name": "21253",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21253"
        },
        {
          "name": "DSA-1137",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1137"
        },
        {
          "name": "21370",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21370"
        },
        {
          "name": "1016671",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016671"
        },
        {
          "name": "21598",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21598"
        },
        {
          "name": "RHSA-2006:0648",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0648.html"
        },
        {
          "name": "MDKSA-2006:137",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:137"
        },
        {
          "name": "19289",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/19289"
        },
        {
          "name": "27222",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27222"
        },
        {
          "name": "ADV-2007-4034",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/4034"
        },
        {
          "name": "TA06-214A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA06-214A.html"
        },
        {
          "name": "SUSE-SA:2006:044",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2006_44_libtiff.html"
        },
        {
          "name": "21290",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21290"
        },
        {
          "name": "oval:org.mitre.oval:def:11497",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11497"
        },
        {
          "name": "21274",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21274"
        },
        {
          "name": "ADV-2006-3105",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/3105"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://secunia.com/blog/76"
        },
        {
          "name": "27181",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27181"
        },
        {
          "name": "RHSA-2006:0603",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0603.html"
        },
        {
          "name": "20060901-01-P",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc"
        },
        {
          "name": "21304",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21304"
        },
        {
          "name": "19283",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/19283"
        },
        {
          "name": "SSA:2006-230-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.536600"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-558"
        },
        {
          "name": "27832",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27832"
        },
        {
          "name": "21346",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21346"
        },
        {
          "name": "201331",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1"
        },
        {
          "name": "21319",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21319"
        },
        {
          "name": "21392",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21392"
        },
        {
          "name": "21334",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21334"
        },
        {
          "name": "22036",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22036"
        },
        {
          "name": "27723",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/27723"
        },
        {
          "name": "2006-0044",
          "tags": [
            "vendor-advisory",
            "x_refsource_TRUSTIX"
          ],
          "url": "http://lwn.net/Alerts/194228/"
        },
        {
          "name": "103160",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2006-3459",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow context-dependent attackers to execute arbitrary code or cause a denial of service via unspecified vectors, including a large tdir_count value in the TIFFFetchShortPair function in tif_dirread.c."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20060801-01-P",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P"
            },
            {
              "name": "APPLE-SA-2006-08-01",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html"
            },
            {
              "name": "ADV-2007-3486",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/3486"
            },
            {
              "name": "21501",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21501"
            },
            {
              "name": "MDKSA-2006:136",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:136"
            },
            {
              "name": "21537",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21537"
            },
            {
              "name": "21632",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21632"
            },
            {
              "name": "GLSA-200608-07",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml"
            },
            {
              "name": "21338",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21338"
            },
            {
              "name": "USN-330-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-330-1"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm"
            },
            {
              "name": "ADV-2006-3101",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/3101"
            },
            {
              "name": "1016628",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016628"
            },
            {
              "name": "21253",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21253"
            },
            {
              "name": "DSA-1137",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1137"
            },
            {
              "name": "21370",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21370"
            },
            {
              "name": "1016671",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016671"
            },
            {
              "name": "21598",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21598"
            },
            {
              "name": "RHSA-2006:0648",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0648.html"
            },
            {
              "name": "MDKSA-2006:137",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:137"
            },
            {
              "name": "19289",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/19289"
            },
            {
              "name": "27222",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27222"
            },
            {
              "name": "ADV-2007-4034",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/4034"
            },
            {
              "name": "TA06-214A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA06-214A.html"
            },
            {
              "name": "SUSE-SA:2006:044",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2006_44_libtiff.html"
            },
            {
              "name": "21290",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21290"
            },
            {
              "name": "oval:org.mitre.oval:def:11497",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11497"
            },
            {
              "name": "21274",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21274"
            },
            {
              "name": "ADV-2006-3105",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/3105"
            },
            {
              "name": "http://secunia.com/blog/76",
              "refsource": "MISC",
              "url": "http://secunia.com/blog/76"
            },
            {
              "name": "27181",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27181"
            },
            {
              "name": "RHSA-2006:0603",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0603.html"
            },
            {
              "name": "20060901-01-P",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc"
            },
            {
              "name": "21304",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21304"
            },
            {
              "name": "19283",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/19283"
            },
            {
              "name": "SSA:2006-230-01",
              "refsource": "SLACKWARE",
              "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.536600"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-558",
              "refsource": "CONFIRM",
              "url": "https://issues.rpath.com/browse/RPL-558"
            },
            {
              "name": "27832",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27832"
            },
            {
              "name": "21346",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21346"
            },
            {
              "name": "201331",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1"
            },
            {
              "name": "21319",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21319"
            },
            {
              "name": "21392",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21392"
            },
            {
              "name": "21334",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21334"
            },
            {
              "name": "22036",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22036"
            },
            {
              "name": "27723",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/27723"
            },
            {
              "name": "2006-0044",
              "refsource": "TRUSTIX",
              "url": "http://lwn.net/Alerts/194228/"
            },
            {
              "name": "103160",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2006-3459",
    "datePublished": "2006-08-03T01:00:00",
    "dateReserved": "2006-07-10T00:00:00",
    "dateUpdated": "2024-08-07T18:30:33.954Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2006-2024

Vulnerability from cvelistv5

Published

2006-04-25 23:00

Modified

2024-08-07 17:35

Severity ?

Summary

Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a TIFF image that triggers errors in (1) the TIFFFetchAnyArray function in (a) tif_dirread.c; (2) certain "codec cleanup methods" in (b) tif_lzw.c, (c) tif_pixarlog.c, and (d) tif_zip.c; (3) and improper restoration of setfield and getfield methods in cleanup functions within (e) tif_jpeg.c, tif_pixarlog.c, (f) tif_fax3.c, and tif_zip.c.

References

▼	URL	Tags
	https://exchange.xforce.ibmcloud.com/vulnerabilities/26133	vdb-entry, x_refsource_XF
	http://secunia.com/advisories/19851	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2006/1563	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/20210	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/19949	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189933	x_refsource_CONFIRM
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-103099-1	vendor-advisory, x_refsource_SUNALERT
	https://usn.ubuntu.com/277-1/	vendor-advisory, x_refsource_UBUNTU
	http://www.gentoo.org/security/en/glsa/glsa-200605-17.xml	vendor-advisory, x_refsource_GENTOO
	http://secunia.com/advisories/20667	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9893	vdb-entry, signature, x_refsource_OVAL
	http://bugzilla.remotesensing.org/show_bug.cgi?id=1102	x_refsource_MISC
	http://secunia.com/advisories/19936	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/19964	third-party-advisory, x_refsource_SECUNIA
	http://sunsolve.sun.com/search/document.do?assetkey=1-66-201332-1	vendor-advisory, x_refsource_SUNALERT
	http://www.trustix.org/errata/2006/0024	vendor-advisory, x_refsource_TRUSTIX
	http://secunia.com/advisories/20345	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2006/dsa-1054	vendor-advisory, x_refsource_DEBIAN
	ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc	vendor-advisory, x_refsource_SGI
	http://support.avaya.com/elmodocs2/security/ASA-2006-119.htm	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2006-0425.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/19838	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/20021	third-party-advisory, x_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=MDKSA-2006:082	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/19897	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/20023	third-party-advisory, x_refsource_SECUNIA
	http://www.novell.com/linux/security/advisories/2006_04_28.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/17730	vdb-entry, x_refsource_BID

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T17:35:31.058Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "libtiff-tifffetchanyarray-dos(26133)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26133"
          },
          {
            "name": "19851",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19851"
          },
          {
            "name": "ADV-2006-1563",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/1563"
          },
          {
            "name": "20210",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20210"
          },
          {
            "name": "19949",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19949"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189933"
          },
          {
            "name": "103099",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103099-1"
          },
          {
            "name": "USN-277-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/277-1/"
          },
          {
            "name": "GLSA-200605-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200605-17.xml"
          },
          {
            "name": "20667",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20667"
          },
          {
            "name": "oval:org.mitre.oval:def:9893",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9893"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://bugzilla.remotesensing.org/show_bug.cgi?id=1102"
          },
          {
            "name": "19936",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19936"
          },
          {
            "name": "19964",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19964"
          },
          {
            "name": "201332",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201332-1"
          },
          {
            "name": "2006-0024",
            "tags": [
              "vendor-advisory",
              "x_refsource_TRUSTIX",
              "x_transferred"
            ],
            "url": "http://www.trustix.org/errata/2006/0024"
          },
          {
            "name": "20345",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20345"
          },
          {
            "name": "DSA-1054",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1054"
          },
          {
            "name": "20060501-01-U",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-119.htm"
          },
          {
            "name": "RHSA-2006:0425",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0425.html"
          },
          {
            "name": "19838",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19838"
          },
          {
            "name": "20021",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20021"
          },
          {
            "name": "MDKSA-2006:082",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:082"
          },
          {
            "name": "19897",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19897"
          },
          {
            "name": "20023",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20023"
          },
          {
            "name": "SUSE-SR:2006:009",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2006_04_28.html"
          },
          {
            "name": "17730",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/17730"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-04-25T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a TIFF image that triggers errors in (1) the TIFFFetchAnyArray function in (a) tif_dirread.c; (2) certain \"codec cleanup methods\" in (b) tif_lzw.c, (c) tif_pixarlog.c, and (d) tif_zip.c; (3) and improper restoration of setfield and getfield methods in cleanup functions within (e) tif_jpeg.c, tif_pixarlog.c, (f) tif_fax3.c, and tif_zip.c."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-03T20:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "libtiff-tifffetchanyarray-dos(26133)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26133"
        },
        {
          "name": "19851",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19851"
        },
        {
          "name": "ADV-2006-1563",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/1563"
        },
        {
          "name": "20210",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20210"
        },
        {
          "name": "19949",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19949"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189933"
        },
        {
          "name": "103099",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103099-1"
        },
        {
          "name": "USN-277-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/277-1/"
        },
        {
          "name": "GLSA-200605-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200605-17.xml"
        },
        {
          "name": "20667",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20667"
        },
        {
          "name": "oval:org.mitre.oval:def:9893",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9893"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://bugzilla.remotesensing.org/show_bug.cgi?id=1102"
        },
        {
          "name": "19936",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19936"
        },
        {
          "name": "19964",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19964"
        },
        {
          "name": "201332",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201332-1"
        },
        {
          "name": "2006-0024",
          "tags": [
            "vendor-advisory",
            "x_refsource_TRUSTIX"
          ],
          "url": "http://www.trustix.org/errata/2006/0024"
        },
        {
          "name": "20345",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20345"
        },
        {
          "name": "DSA-1054",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1054"
        },
        {
          "name": "20060501-01-U",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-119.htm"
        },
        {
          "name": "RHSA-2006:0425",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0425.html"
        },
        {
          "name": "19838",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19838"
        },
        {
          "name": "20021",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20021"
        },
        {
          "name": "MDKSA-2006:082",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:082"
        },
        {
          "name": "19897",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19897"
        },
        {
          "name": "20023",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20023"
        },
        {
          "name": "SUSE-SR:2006:009",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2006_04_28.html"
        },
        {
          "name": "17730",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/17730"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-2024",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a TIFF image that triggers errors in (1) the TIFFFetchAnyArray function in (a) tif_dirread.c; (2) certain \"codec cleanup methods\" in (b) tif_lzw.c, (c) tif_pixarlog.c, and (d) tif_zip.c; (3) and improper restoration of setfield and getfield methods in cleanup functions within (e) tif_jpeg.c, tif_pixarlog.c, (f) tif_fax3.c, and tif_zip.c."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "libtiff-tifffetchanyarray-dos(26133)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26133"
            },
            {
              "name": "19851",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19851"
            },
            {
              "name": "ADV-2006-1563",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/1563"
            },
            {
              "name": "20210",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20210"
            },
            {
              "name": "19949",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19949"
            },
            {
              "name": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189933",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189933"
            },
            {
              "name": "103099",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103099-1"
            },
            {
              "name": "USN-277-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/277-1/"
            },
            {
              "name": "GLSA-200605-17",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200605-17.xml"
            },
            {
              "name": "20667",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20667"
            },
            {
              "name": "oval:org.mitre.oval:def:9893",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9893"
            },
            {
              "name": "http://bugzilla.remotesensing.org/show_bug.cgi?id=1102",
              "refsource": "MISC",
              "url": "http://bugzilla.remotesensing.org/show_bug.cgi?id=1102"
            },
            {
              "name": "19936",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19936"
            },
            {
              "name": "19964",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19964"
            },
            {
              "name": "201332",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201332-1"
            },
            {
              "name": "2006-0024",
              "refsource": "TRUSTIX",
              "url": "http://www.trustix.org/errata/2006/0024"
            },
            {
              "name": "20345",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20345"
            },
            {
              "name": "DSA-1054",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1054"
            },
            {
              "name": "20060501-01-U",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2006-119.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-119.htm"
            },
            {
              "name": "RHSA-2006:0425",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0425.html"
            },
            {
              "name": "19838",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19838"
            },
            {
              "name": "20021",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20021"
            },
            {
              "name": "MDKSA-2006:082",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:082"
            },
            {
              "name": "19897",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19897"
            },
            {
              "name": "20023",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20023"
            },
            {
              "name": "SUSE-SR:2006:009",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2006_04_28.html"
            },
            {
              "name": "17730",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/17730"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-2024",
    "datePublished": "2006-04-25T23:00:00",
    "dateReserved": "2006-04-25T00:00:00",
    "dateUpdated": "2024-08-07T17:35:31.058Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2006-3461

Vulnerability from cvelistv5

Published

2006-08-03 01:00

Modified

2024-08-07 18:30

Severity ?

Summary

Heap-based buffer overflow in the PixarLog decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors.

References

▼	URL	Tags
	ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P	vendor-advisory, x_refsource_SGI
	http://www.osvdb.org/27725	vdb-entry, x_refsource_OSVDB
	http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html	vendor-advisory, x_refsource_APPLE
	http://www.vupen.com/english/advisories/2007/3486	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/21501	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/19290	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/21537	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21632	third-party-advisory, x_refsource_SECUNIA
	http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml	vendor-advisory, x_refsource_GENTOO
	http://secunia.com/advisories/21338	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/usn-330-1	vendor-advisory, x_refsource_UBUNTU
	http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2006/3101	vdb-entry, x_refsource_VUPEN
	http://securitytracker.com/id?1016628	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/21253	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2006/dsa-1137	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/21370	third-party-advisory, x_refsource_SECUNIA
	http://securitytracker.com/id?1016671	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/21598	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2006-0648.html	vendor-advisory, x_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=MDKSA-2006:137	vendor-advisory, x_refsource_MANDRIVA
	http://www.securityfocus.com/bid/19289	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/27222	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2007/4034	vdb-entry, x_refsource_VUPEN
	http://www.us-cert.gov/cas/techalerts/TA06-214A.html	third-party-advisory, x_refsource_CERT
	http://www.novell.com/linux/security/advisories/2006_44_libtiff.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/21290	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21274	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2006/3105	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/27181	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2006-0603.html	vendor-advisory, x_refsource_REDHAT
	ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc	vendor-advisory, x_refsource_SGI
	http://secunia.com/advisories/21304	third-party-advisory, x_refsource_SECUNIA
	http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.536600	vendor-advisory, x_refsource_SLACKWARE
	https://issues.rpath.com/browse/RPL-558	x_refsource_CONFIRM
	http://secunia.com/advisories/27832	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21346	third-party-advisory, x_refsource_SECUNIA
	http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1	vendor-advisory, x_refsource_SUNALERT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9910	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/21319	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21392	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21334	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/22036	third-party-advisory, x_refsource_SECUNIA
	http://lwn.net/Alerts/194228/	vendor-advisory, x_refsource_TRUSTIX
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1	vendor-advisory, x_refsource_SUNALERT

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T18:30:33.565Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20060801-01-P",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P"
          },
          {
            "name": "27725",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/27725"
          },
          {
            "name": "APPLE-SA-2006-08-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html"
          },
          {
            "name": "ADV-2007-3486",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/3486"
          },
          {
            "name": "21501",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21501"
          },
          {
            "name": "19290",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/19290"
          },
          {
            "name": "21537",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21537"
          },
          {
            "name": "21632",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21632"
          },
          {
            "name": "GLSA-200608-07",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml"
          },
          {
            "name": "21338",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21338"
          },
          {
            "name": "USN-330-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-330-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm"
          },
          {
            "name": "ADV-2006-3101",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/3101"
          },
          {
            "name": "1016628",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016628"
          },
          {
            "name": "21253",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21253"
          },
          {
            "name": "DSA-1137",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1137"
          },
          {
            "name": "21370",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21370"
          },
          {
            "name": "1016671",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016671"
          },
          {
            "name": "21598",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21598"
          },
          {
            "name": "RHSA-2006:0648",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0648.html"
          },
          {
            "name": "MDKSA-2006:137",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:137"
          },
          {
            "name": "19289",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/19289"
          },
          {
            "name": "27222",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27222"
          },
          {
            "name": "ADV-2007-4034",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/4034"
          },
          {
            "name": "TA06-214A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA06-214A.html"
          },
          {
            "name": "SUSE-SA:2006:044",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2006_44_libtiff.html"
          },
          {
            "name": "21290",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21290"
          },
          {
            "name": "21274",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21274"
          },
          {
            "name": "ADV-2006-3105",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/3105"
          },
          {
            "name": "27181",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27181"
          },
          {
            "name": "RHSA-2006:0603",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0603.html"
          },
          {
            "name": "20060901-01-P",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc"
          },
          {
            "name": "21304",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21304"
          },
          {
            "name": "SSA:2006-230-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.536600"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-558"
          },
          {
            "name": "27832",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27832"
          },
          {
            "name": "21346",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21346"
          },
          {
            "name": "201331",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1"
          },
          {
            "name": "oval:org.mitre.oval:def:9910",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9910"
          },
          {
            "name": "21319",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21319"
          },
          {
            "name": "21392",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21392"
          },
          {
            "name": "21334",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21334"
          },
          {
            "name": "22036",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22036"
          },
          {
            "name": "2006-0044",
            "tags": [
              "vendor-advisory",
              "x_refsource_TRUSTIX",
              "x_transferred"
            ],
            "url": "http://lwn.net/Alerts/194228/"
          },
          {
            "name": "103160",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-08-01T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in the PixarLog decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-10T00:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "20060801-01-P",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P"
        },
        {
          "name": "27725",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/27725"
        },
        {
          "name": "APPLE-SA-2006-08-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html"
        },
        {
          "name": "ADV-2007-3486",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/3486"
        },
        {
          "name": "21501",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21501"
        },
        {
          "name": "19290",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/19290"
        },
        {
          "name": "21537",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21537"
        },
        {
          "name": "21632",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21632"
        },
        {
          "name": "GLSA-200608-07",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml"
        },
        {
          "name": "21338",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21338"
        },
        {
          "name": "USN-330-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-330-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm"
        },
        {
          "name": "ADV-2006-3101",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/3101"
        },
        {
          "name": "1016628",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016628"
        },
        {
          "name": "21253",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21253"
        },
        {
          "name": "DSA-1137",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1137"
        },
        {
          "name": "21370",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21370"
        },
        {
          "name": "1016671",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016671"
        },
        {
          "name": "21598",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21598"
        },
        {
          "name": "RHSA-2006:0648",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0648.html"
        },
        {
          "name": "MDKSA-2006:137",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:137"
        },
        {
          "name": "19289",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/19289"
        },
        {
          "name": "27222",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27222"
        },
        {
          "name": "ADV-2007-4034",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/4034"
        },
        {
          "name": "TA06-214A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA06-214A.html"
        },
        {
          "name": "SUSE-SA:2006:044",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2006_44_libtiff.html"
        },
        {
          "name": "21290",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21290"
        },
        {
          "name": "21274",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21274"
        },
        {
          "name": "ADV-2006-3105",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/3105"
        },
        {
          "name": "27181",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27181"
        },
        {
          "name": "RHSA-2006:0603",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0603.html"
        },
        {
          "name": "20060901-01-P",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc"
        },
        {
          "name": "21304",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21304"
        },
        {
          "name": "SSA:2006-230-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.536600"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-558"
        },
        {
          "name": "27832",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27832"
        },
        {
          "name": "21346",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21346"
        },
        {
          "name": "201331",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1"
        },
        {
          "name": "oval:org.mitre.oval:def:9910",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9910"
        },
        {
          "name": "21319",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21319"
        },
        {
          "name": "21392",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21392"
        },
        {
          "name": "21334",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21334"
        },
        {
          "name": "22036",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22036"
        },
        {
          "name": "2006-0044",
          "tags": [
            "vendor-advisory",
            "x_refsource_TRUSTIX"
          ],
          "url": "http://lwn.net/Alerts/194228/"
        },
        {
          "name": "103160",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2006-3461",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in the PixarLog decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20060801-01-P",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P"
            },
            {
              "name": "27725",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/27725"
            },
            {
              "name": "APPLE-SA-2006-08-01",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html"
            },
            {
              "name": "ADV-2007-3486",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/3486"
            },
            {
              "name": "21501",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21501"
            },
            {
              "name": "19290",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/19290"
            },
            {
              "name": "21537",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21537"
            },
            {
              "name": "21632",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21632"
            },
            {
              "name": "GLSA-200608-07",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml"
            },
            {
              "name": "21338",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21338"
            },
            {
              "name": "USN-330-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-330-1"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm"
            },
            {
              "name": "ADV-2006-3101",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/3101"
            },
            {
              "name": "1016628",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016628"
            },
            {
              "name": "21253",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21253"
            },
            {
              "name": "DSA-1137",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1137"
            },
            {
              "name": "21370",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21370"
            },
            {
              "name": "1016671",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016671"
            },
            {
              "name": "21598",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21598"
            },
            {
              "name": "RHSA-2006:0648",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0648.html"
            },
            {
              "name": "MDKSA-2006:137",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:137"
            },
            {
              "name": "19289",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/19289"
            },
            {
              "name": "27222",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27222"
            },
            {
              "name": "ADV-2007-4034",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/4034"
            },
            {
              "name": "TA06-214A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA06-214A.html"
            },
            {
              "name": "SUSE-SA:2006:044",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2006_44_libtiff.html"
            },
            {
              "name": "21290",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21290"
            },
            {
              "name": "21274",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21274"
            },
            {
              "name": "ADV-2006-3105",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/3105"
            },
            {
              "name": "27181",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27181"
            },
            {
              "name": "RHSA-2006:0603",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0603.html"
            },
            {
              "name": "20060901-01-P",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc"
            },
            {
              "name": "21304",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21304"
            },
            {
              "name": "SSA:2006-230-01",
              "refsource": "SLACKWARE",
              "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.536600"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-558",
              "refsource": "CONFIRM",
              "url": "https://issues.rpath.com/browse/RPL-558"
            },
            {
              "name": "27832",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27832"
            },
            {
              "name": "21346",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21346"
            },
            {
              "name": "201331",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1"
            },
            {
              "name": "oval:org.mitre.oval:def:9910",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9910"
            },
            {
              "name": "21319",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21319"
            },
            {
              "name": "21392",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21392"
            },
            {
              "name": "21334",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21334"
            },
            {
              "name": "22036",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22036"
            },
            {
              "name": "2006-0044",
              "refsource": "TRUSTIX",
              "url": "http://lwn.net/Alerts/194228/"
            },
            {
              "name": "103160",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2006-3461",
    "datePublished": "2006-08-03T01:00:00",
    "dateReserved": "2006-07-10T00:00:00",
    "dateUpdated": "2024-08-07T18:30:33.565Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2006-3463

Vulnerability from cvelistv5

Published

2006-08-03 01:00

Modified

2024-08-07 18:30

Severity ?

Summary

The EstimateStripByteCounts function in TIFF library (libtiff) before 3.8.2 uses a 16-bit unsigned short when iterating over an unsigned 32-bit value, which allows context-dependent attackers to cause a denial of service via a large td_nstrips value, which triggers an infinite loop.

References

▼	URL	Tags
	ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P	vendor-advisory, x_refsource_SGI
	http://www.vupen.com/english/advisories/2007/3486	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/21501	third-party-advisory, x_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=MDKSA-2006:136	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/21537	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21632	third-party-advisory, x_refsource_SECUNIA
	http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml	vendor-advisory, x_refsource_GENTOO
	http://secunia.com/advisories/21338	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/usn-330-1	vendor-advisory, x_refsource_UBUNTU
	http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm	x_refsource_CONFIRM
	http://securitytracker.com/id?1016628	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2006/dsa-1137	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/21370	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21598	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2006-0648.html	vendor-advisory, x_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=MDKSA-2006:137	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/27222	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2007/4034	vdb-entry, x_refsource_VUPEN
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10639	vdb-entry, signature, x_refsource_OVAL
	http://www.novell.com/linux/security/advisories/2006_44_libtiff.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/21290	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21274	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2006/3105	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/27181	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2006-0603.html	vendor-advisory, x_refsource_REDHAT
	ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc	vendor-advisory, x_refsource_SGI
	http://secunia.com/advisories/21304	third-party-advisory, x_refsource_SECUNIA
	http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.536600	vendor-advisory, x_refsource_SLACKWARE
	https://issues.rpath.com/browse/RPL-558	x_refsource_CONFIRM
	http://secunia.com/advisories/27832	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21346	third-party-advisory, x_refsource_SECUNIA
	http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1	vendor-advisory, x_refsource_SUNALERT
	http://www.securityfocus.com/bid/19284	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/21319	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21392	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21334	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/22036	third-party-advisory, x_refsource_SECUNIA
	http://lwn.net/Alerts/194228/	vendor-advisory, x_refsource_TRUSTIX
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1	vendor-advisory, x_refsource_SUNALERT

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T18:30:33.993Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20060801-01-P",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P"
          },
          {
            "name": "ADV-2007-3486",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/3486"
          },
          {
            "name": "21501",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21501"
          },
          {
            "name": "MDKSA-2006:136",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:136"
          },
          {
            "name": "21537",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21537"
          },
          {
            "name": "21632",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21632"
          },
          {
            "name": "GLSA-200608-07",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml"
          },
          {
            "name": "21338",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21338"
          },
          {
            "name": "USN-330-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-330-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm"
          },
          {
            "name": "1016628",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016628"
          },
          {
            "name": "DSA-1137",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1137"
          },
          {
            "name": "21370",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21370"
          },
          {
            "name": "21598",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21598"
          },
          {
            "name": "RHSA-2006:0648",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0648.html"
          },
          {
            "name": "MDKSA-2006:137",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:137"
          },
          {
            "name": "27222",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27222"
          },
          {
            "name": "ADV-2007-4034",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/4034"
          },
          {
            "name": "oval:org.mitre.oval:def:10639",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10639"
          },
          {
            "name": "SUSE-SA:2006:044",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2006_44_libtiff.html"
          },
          {
            "name": "21290",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21290"
          },
          {
            "name": "21274",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21274"
          },
          {
            "name": "ADV-2006-3105",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/3105"
          },
          {
            "name": "27181",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27181"
          },
          {
            "name": "RHSA-2006:0603",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0603.html"
          },
          {
            "name": "20060901-01-P",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc"
          },
          {
            "name": "21304",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21304"
          },
          {
            "name": "SSA:2006-230-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.536600"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-558"
          },
          {
            "name": "27832",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27832"
          },
          {
            "name": "21346",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21346"
          },
          {
            "name": "201331",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1"
          },
          {
            "name": "19284",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/19284"
          },
          {
            "name": "21319",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21319"
          },
          {
            "name": "21392",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21392"
          },
          {
            "name": "21334",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21334"
          },
          {
            "name": "22036",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22036"
          },
          {
            "name": "2006-0044",
            "tags": [
              "vendor-advisory",
              "x_refsource_TRUSTIX",
              "x_transferred"
            ],
            "url": "http://lwn.net/Alerts/194228/"
          },
          {
            "name": "103160",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-08-01T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The EstimateStripByteCounts function in TIFF library (libtiff) before 3.8.2 uses a 16-bit unsigned short when iterating over an unsigned 32-bit value, which allows context-dependent attackers to cause a denial of service via a large td_nstrips value, which triggers an infinite loop."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-10T00:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "20060801-01-P",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P"
        },
        {
          "name": "ADV-2007-3486",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/3486"
        },
        {
          "name": "21501",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21501"
        },
        {
          "name": "MDKSA-2006:136",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:136"
        },
        {
          "name": "21537",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21537"
        },
        {
          "name": "21632",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21632"
        },
        {
          "name": "GLSA-200608-07",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml"
        },
        {
          "name": "21338",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21338"
        },
        {
          "name": "USN-330-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-330-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm"
        },
        {
          "name": "1016628",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016628"
        },
        {
          "name": "DSA-1137",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1137"
        },
        {
          "name": "21370",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21370"
        },
        {
          "name": "21598",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21598"
        },
        {
          "name": "RHSA-2006:0648",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0648.html"
        },
        {
          "name": "MDKSA-2006:137",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:137"
        },
        {
          "name": "27222",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27222"
        },
        {
          "name": "ADV-2007-4034",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/4034"
        },
        {
          "name": "oval:org.mitre.oval:def:10639",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10639"
        },
        {
          "name": "SUSE-SA:2006:044",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2006_44_libtiff.html"
        },
        {
          "name": "21290",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21290"
        },
        {
          "name": "21274",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21274"
        },
        {
          "name": "ADV-2006-3105",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/3105"
        },
        {
          "name": "27181",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27181"
        },
        {
          "name": "RHSA-2006:0603",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0603.html"
        },
        {
          "name": "20060901-01-P",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc"
        },
        {
          "name": "21304",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21304"
        },
        {
          "name": "SSA:2006-230-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.536600"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-558"
        },
        {
          "name": "27832",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27832"
        },
        {
          "name": "21346",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21346"
        },
        {
          "name": "201331",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1"
        },
        {
          "name": "19284",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/19284"
        },
        {
          "name": "21319",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21319"
        },
        {
          "name": "21392",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21392"
        },
        {
          "name": "21334",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21334"
        },
        {
          "name": "22036",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22036"
        },
        {
          "name": "2006-0044",
          "tags": [
            "vendor-advisory",
            "x_refsource_TRUSTIX"
          ],
          "url": "http://lwn.net/Alerts/194228/"
        },
        {
          "name": "103160",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2006-3463",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The EstimateStripByteCounts function in TIFF library (libtiff) before 3.8.2 uses a 16-bit unsigned short when iterating over an unsigned 32-bit value, which allows context-dependent attackers to cause a denial of service via a large td_nstrips value, which triggers an infinite loop."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20060801-01-P",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P"
            },
            {
              "name": "ADV-2007-3486",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/3486"
            },
            {
              "name": "21501",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21501"
            },
            {
              "name": "MDKSA-2006:136",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:136"
            },
            {
              "name": "21537",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21537"
            },
            {
              "name": "21632",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21632"
            },
            {
              "name": "GLSA-200608-07",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml"
            },
            {
              "name": "21338",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21338"
            },
            {
              "name": "USN-330-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-330-1"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm"
            },
            {
              "name": "1016628",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016628"
            },
            {
              "name": "DSA-1137",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1137"
            },
            {
              "name": "21370",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21370"
            },
            {
              "name": "21598",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21598"
            },
            {
              "name": "RHSA-2006:0648",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0648.html"
            },
            {
              "name": "MDKSA-2006:137",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:137"
            },
            {
              "name": "27222",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27222"
            },
            {
              "name": "ADV-2007-4034",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/4034"
            },
            {
              "name": "oval:org.mitre.oval:def:10639",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10639"
            },
            {
              "name": "SUSE-SA:2006:044",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2006_44_libtiff.html"
            },
            {
              "name": "21290",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21290"
            },
            {
              "name": "21274",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21274"
            },
            {
              "name": "ADV-2006-3105",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/3105"
            },
            {
              "name": "27181",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27181"
            },
            {
              "name": "RHSA-2006:0603",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0603.html"
            },
            {
              "name": "20060901-01-P",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc"
            },
            {
              "name": "21304",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21304"
            },
            {
              "name": "SSA:2006-230-01",
              "refsource": "SLACKWARE",
              "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.536600"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-558",
              "refsource": "CONFIRM",
              "url": "https://issues.rpath.com/browse/RPL-558"
            },
            {
              "name": "27832",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27832"
            },
            {
              "name": "21346",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21346"
            },
            {
              "name": "201331",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1"
            },
            {
              "name": "19284",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/19284"
            },
            {
              "name": "21319",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21319"
            },
            {
              "name": "21392",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21392"
            },
            {
              "name": "21334",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21334"
            },
            {
              "name": "22036",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22036"
            },
            {
              "name": "2006-0044",
              "refsource": "TRUSTIX",
              "url": "http://lwn.net/Alerts/194228/"
            },
            {
              "name": "103160",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2006-3463",
    "datePublished": "2006-08-03T01:00:00",
    "dateReserved": "2006-07-10T00:00:00",
    "dateUpdated": "2024-08-07T18:30:33.993Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2006-3464

Vulnerability from cvelistv5

Published

2006-08-03 01:00

Modified

2024-08-07 18:30

Severity ?

Summary

TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to pass numeric range checks and possibly execute code, and trigger assert errors, via large offset values in a TIFF directory that lead to an integer overflow and other unspecified vectors involving "unchecked arithmetic operations".

References

▼	URL	Tags
	ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P	vendor-advisory, x_refsource_SGI
	http://secunia.com/advisories/21501	third-party-advisory, x_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=MDKSA-2006:136	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/21537	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21632	third-party-advisory, x_refsource_SECUNIA
	http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml	vendor-advisory, x_refsource_GENTOO
	http://secunia.com/advisories/21338	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/usn-330-1	vendor-advisory, x_refsource_UBUNTU
	http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm	x_refsource_CONFIRM
	http://securitytracker.com/id?1016628	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2006/dsa-1137	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/21370	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21598	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2006-0648.html	vendor-advisory, x_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=MDKSA-2006:137	vendor-advisory, x_refsource_MANDRIVA
	http://www.vupen.com/english/advisories/2007/4034	vdb-entry, x_refsource_VUPEN
	http://www.novell.com/linux/security/advisories/2006_44_libtiff.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/21290	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21274	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2006/3105	vdb-entry, x_refsource_VUPEN
	http://www.redhat.com/support/errata/RHSA-2006-0603.html	vendor-advisory, x_refsource_REDHAT
	ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc	vendor-advisory, x_refsource_SGI
	http://secunia.com/advisories/21304	third-party-advisory, x_refsource_SECUNIA
	http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.536600	vendor-advisory, x_refsource_SLACKWARE
	https://issues.rpath.com/browse/RPL-558	x_refsource_CONFIRM
	http://secunia.com/advisories/27832	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21346	third-party-advisory, x_refsource_SECUNIA
	http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1	vendor-advisory, x_refsource_SUNALERT
	http://www.securityfocus.com/bid/19286	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/21319	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21392	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21334	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10916	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/22036	third-party-advisory, x_refsource_SECUNIA
	http://lwn.net/Alerts/194228/	vendor-advisory, x_refsource_TRUSTIX
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1	vendor-advisory, x_refsource_SUNALERT

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T18:30:33.995Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20060801-01-P",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P"
          },
          {
            "name": "21501",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21501"
          },
          {
            "name": "MDKSA-2006:136",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:136"
          },
          {
            "name": "21537",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21537"
          },
          {
            "name": "21632",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21632"
          },
          {
            "name": "GLSA-200608-07",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml"
          },
          {
            "name": "21338",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21338"
          },
          {
            "name": "USN-330-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-330-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm"
          },
          {
            "name": "1016628",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016628"
          },
          {
            "name": "DSA-1137",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1137"
          },
          {
            "name": "21370",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21370"
          },
          {
            "name": "21598",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21598"
          },
          {
            "name": "RHSA-2006:0648",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0648.html"
          },
          {
            "name": "MDKSA-2006:137",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:137"
          },
          {
            "name": "ADV-2007-4034",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/4034"
          },
          {
            "name": "SUSE-SA:2006:044",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2006_44_libtiff.html"
          },
          {
            "name": "21290",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21290"
          },
          {
            "name": "21274",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21274"
          },
          {
            "name": "ADV-2006-3105",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/3105"
          },
          {
            "name": "RHSA-2006:0603",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0603.html"
          },
          {
            "name": "20060901-01-P",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc"
          },
          {
            "name": "21304",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21304"
          },
          {
            "name": "SSA:2006-230-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.536600"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-558"
          },
          {
            "name": "27832",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27832"
          },
          {
            "name": "21346",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21346"
          },
          {
            "name": "201331",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1"
          },
          {
            "name": "19286",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/19286"
          },
          {
            "name": "21319",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21319"
          },
          {
            "name": "21392",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21392"
          },
          {
            "name": "21334",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21334"
          },
          {
            "name": "oval:org.mitre.oval:def:10916",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10916"
          },
          {
            "name": "22036",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22036"
          },
          {
            "name": "2006-0044",
            "tags": [
              "vendor-advisory",
              "x_refsource_TRUSTIX",
              "x_transferred"
            ],
            "url": "http://lwn.net/Alerts/194228/"
          },
          {
            "name": "103160",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-08-01T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to pass numeric range checks and possibly execute code, and trigger assert errors, via large offset values in a TIFF directory that lead to an integer overflow and other unspecified vectors involving \"unchecked arithmetic operations\"."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-10T00:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "20060801-01-P",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P"
        },
        {
          "name": "21501",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21501"
        },
        {
          "name": "MDKSA-2006:136",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:136"
        },
        {
          "name": "21537",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21537"
        },
        {
          "name": "21632",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21632"
        },
        {
          "name": "GLSA-200608-07",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml"
        },
        {
          "name": "21338",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21338"
        },
        {
          "name": "USN-330-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-330-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm"
        },
        {
          "name": "1016628",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016628"
        },
        {
          "name": "DSA-1137",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1137"
        },
        {
          "name": "21370",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21370"
        },
        {
          "name": "21598",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21598"
        },
        {
          "name": "RHSA-2006:0648",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0648.html"
        },
        {
          "name": "MDKSA-2006:137",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:137"
        },
        {
          "name": "ADV-2007-4034",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/4034"
        },
        {
          "name": "SUSE-SA:2006:044",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2006_44_libtiff.html"
        },
        {
          "name": "21290",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21290"
        },
        {
          "name": "21274",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21274"
        },
        {
          "name": "ADV-2006-3105",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/3105"
        },
        {
          "name": "RHSA-2006:0603",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0603.html"
        },
        {
          "name": "20060901-01-P",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc"
        },
        {
          "name": "21304",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21304"
        },
        {
          "name": "SSA:2006-230-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.536600"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-558"
        },
        {
          "name": "27832",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27832"
        },
        {
          "name": "21346",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21346"
        },
        {
          "name": "201331",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1"
        },
        {
          "name": "19286",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/19286"
        },
        {
          "name": "21319",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21319"
        },
        {
          "name": "21392",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21392"
        },
        {
          "name": "21334",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21334"
        },
        {
          "name": "oval:org.mitre.oval:def:10916",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10916"
        },
        {
          "name": "22036",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22036"
        },
        {
          "name": "2006-0044",
          "tags": [
            "vendor-advisory",
            "x_refsource_TRUSTIX"
          ],
          "url": "http://lwn.net/Alerts/194228/"
        },
        {
          "name": "103160",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2006-3464",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to pass numeric range checks and possibly execute code, and trigger assert errors, via large offset values in a TIFF directory that lead to an integer overflow and other unspecified vectors involving \"unchecked arithmetic operations\"."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20060801-01-P",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P"
            },
            {
              "name": "21501",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21501"
            },
            {
              "name": "MDKSA-2006:136",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:136"
            },
            {
              "name": "21537",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21537"
            },
            {
              "name": "21632",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21632"
            },
            {
              "name": "GLSA-200608-07",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml"
            },
            {
              "name": "21338",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21338"
            },
            {
              "name": "USN-330-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-330-1"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm"
            },
            {
              "name": "1016628",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016628"
            },
            {
              "name": "DSA-1137",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1137"
            },
            {
              "name": "21370",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21370"
            },
            {
              "name": "21598",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21598"
            },
            {
              "name": "RHSA-2006:0648",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0648.html"
            },
            {
              "name": "MDKSA-2006:137",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:137"
            },
            {
              "name": "ADV-2007-4034",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/4034"
            },
            {
              "name": "SUSE-SA:2006:044",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2006_44_libtiff.html"
            },
            {
              "name": "21290",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21290"
            },
            {
              "name": "21274",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21274"
            },
            {
              "name": "ADV-2006-3105",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/3105"
            },
            {
              "name": "RHSA-2006:0603",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0603.html"
            },
            {
              "name": "20060901-01-P",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc"
            },
            {
              "name": "21304",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21304"
            },
            {
              "name": "SSA:2006-230-01",
              "refsource": "SLACKWARE",
              "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.536600"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-558",
              "refsource": "CONFIRM",
              "url": "https://issues.rpath.com/browse/RPL-558"
            },
            {
              "name": "27832",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27832"
            },
            {
              "name": "21346",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21346"
            },
            {
              "name": "201331",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1"
            },
            {
              "name": "19286",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/19286"
            },
            {
              "name": "21319",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21319"
            },
            {
              "name": "21392",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21392"
            },
            {
              "name": "21334",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21334"
            },
            {
              "name": "oval:org.mitre.oval:def:10916",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10916"
            },
            {
              "name": "22036",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22036"
            },
            {
              "name": "2006-0044",
              "refsource": "TRUSTIX",
              "url": "http://lwn.net/Alerts/194228/"
            },
            {
              "name": "103160",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2006-3464",
    "datePublished": "2006-08-03T01:00:00",
    "dateReserved": "2006-07-10T00:00:00",
    "dateUpdated": "2024-08-07T18:30:33.995Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2006-2026

Vulnerability from cvelistv5

Published

2006-04-25 23:00

Modified

2024-08-07 17:35

Severity ?

Summary

Double free vulnerability in tif_jpeg.c in libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image that triggers errors related to "setfield/getfield methods in cleanup functions."

References

▼	URL	Tags
	http://www.vupen.com/english/advisories/2006/1563	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/20210	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/19949	third-party-advisory, x_refsource_SECUNIA
	https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189933	x_refsource_CONFIRM
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-103099-1	vendor-advisory, x_refsource_SUNALERT
	https://usn.ubuntu.com/277-1/	vendor-advisory, x_refsource_UBUNTU
	http://www.gentoo.org/security/en/glsa/glsa-200605-17.xml	vendor-advisory, x_refsource_GENTOO
	http://secunia.com/advisories/20667	third-party-advisory, x_refsource_SECUNIA
	http://bugzilla.remotesensing.org/show_bug.cgi?id=1102	x_refsource_MISC
	https://exchange.xforce.ibmcloud.com/vulnerabilities/26135	vdb-entry, x_refsource_XF
	http://secunia.com/advisories/19936	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/19964	third-party-advisory, x_refsource_SECUNIA
	http://sunsolve.sun.com/search/document.do?assetkey=1-66-201332-1	vendor-advisory, x_refsource_SUNALERT
	http://www.trustix.org/errata/2006/0024	vendor-advisory, x_refsource_TRUSTIX
	http://secunia.com/advisories/20345	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2006/dsa-1054	vendor-advisory, x_refsource_DEBIAN
	ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc	vendor-advisory, x_refsource_SGI
	http://support.avaya.com/elmodocs2/security/ASA-2006-119.htm	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11389	vdb-entry, signature, x_refsource_OVAL
	http://www.redhat.com/support/errata/RHSA-2006-0425.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/19838	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/20021	third-party-advisory, x_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=MDKSA-2006:082	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/19897	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/20023	third-party-advisory, x_refsource_SECUNIA
	http://www.novell.com/linux/security/advisories/2006_04_28.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/17733	vdb-entry, x_refsource_BID

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T17:35:31.181Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ADV-2006-1563",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/1563"
          },
          {
            "name": "20210",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20210"
          },
          {
            "name": "19949",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19949"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189933"
          },
          {
            "name": "103099",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103099-1"
          },
          {
            "name": "USN-277-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/277-1/"
          },
          {
            "name": "GLSA-200605-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200605-17.xml"
          },
          {
            "name": "20667",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20667"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://bugzilla.remotesensing.org/show_bug.cgi?id=1102"
          },
          {
            "name": "libtiff-tifjpeg-doublefree-memory-corruption(26135)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26135"
          },
          {
            "name": "19936",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19936"
          },
          {
            "name": "19964",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19964"
          },
          {
            "name": "201332",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201332-1"
          },
          {
            "name": "2006-0024",
            "tags": [
              "vendor-advisory",
              "x_refsource_TRUSTIX",
              "x_transferred"
            ],
            "url": "http://www.trustix.org/errata/2006/0024"
          },
          {
            "name": "20345",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20345"
          },
          {
            "name": "DSA-1054",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1054"
          },
          {
            "name": "20060501-01-U",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-119.htm"
          },
          {
            "name": "oval:org.mitre.oval:def:11389",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11389"
          },
          {
            "name": "RHSA-2006:0425",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0425.html"
          },
          {
            "name": "19838",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19838"
          },
          {
            "name": "20021",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20021"
          },
          {
            "name": "MDKSA-2006:082",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:082"
          },
          {
            "name": "19897",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19897"
          },
          {
            "name": "20023",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20023"
          },
          {
            "name": "SUSE-SR:2006:009",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2006_04_28.html"
          },
          {
            "name": "17733",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/17733"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-04-25T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Double free vulnerability in tif_jpeg.c in libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image that triggers errors related to \"setfield/getfield methods in cleanup functions.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-03T20:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "ADV-2006-1563",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/1563"
        },
        {
          "name": "20210",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20210"
        },
        {
          "name": "19949",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19949"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189933"
        },
        {
          "name": "103099",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103099-1"
        },
        {
          "name": "USN-277-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/277-1/"
        },
        {
          "name": "GLSA-200605-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200605-17.xml"
        },
        {
          "name": "20667",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20667"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://bugzilla.remotesensing.org/show_bug.cgi?id=1102"
        },
        {
          "name": "libtiff-tifjpeg-doublefree-memory-corruption(26135)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26135"
        },
        {
          "name": "19936",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19936"
        },
        {
          "name": "19964",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19964"
        },
        {
          "name": "201332",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201332-1"
        },
        {
          "name": "2006-0024",
          "tags": [
            "vendor-advisory",
            "x_refsource_TRUSTIX"
          ],
          "url": "http://www.trustix.org/errata/2006/0024"
        },
        {
          "name": "20345",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20345"
        },
        {
          "name": "DSA-1054",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1054"
        },
        {
          "name": "20060501-01-U",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-119.htm"
        },
        {
          "name": "oval:org.mitre.oval:def:11389",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11389"
        },
        {
          "name": "RHSA-2006:0425",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0425.html"
        },
        {
          "name": "19838",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19838"
        },
        {
          "name": "20021",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20021"
        },
        {
          "name": "MDKSA-2006:082",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:082"
        },
        {
          "name": "19897",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19897"
        },
        {
          "name": "20023",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20023"
        },
        {
          "name": "SUSE-SR:2006:009",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2006_04_28.html"
        },
        {
          "name": "17733",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/17733"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-2026",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Double free vulnerability in tif_jpeg.c in libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image that triggers errors related to \"setfield/getfield methods in cleanup functions.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "ADV-2006-1563",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/1563"
            },
            {
              "name": "20210",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20210"
            },
            {
              "name": "19949",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19949"
            },
            {
              "name": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189933",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189933"
            },
            {
              "name": "103099",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103099-1"
            },
            {
              "name": "USN-277-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/277-1/"
            },
            {
              "name": "GLSA-200605-17",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200605-17.xml"
            },
            {
              "name": "20667",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20667"
            },
            {
              "name": "http://bugzilla.remotesensing.org/show_bug.cgi?id=1102",
              "refsource": "MISC",
              "url": "http://bugzilla.remotesensing.org/show_bug.cgi?id=1102"
            },
            {
              "name": "libtiff-tifjpeg-doublefree-memory-corruption(26135)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26135"
            },
            {
              "name": "19936",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19936"
            },
            {
              "name": "19964",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19964"
            },
            {
              "name": "201332",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201332-1"
            },
            {
              "name": "2006-0024",
              "refsource": "TRUSTIX",
              "url": "http://www.trustix.org/errata/2006/0024"
            },
            {
              "name": "20345",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20345"
            },
            {
              "name": "DSA-1054",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1054"
            },
            {
              "name": "20060501-01-U",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2006-119.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-119.htm"
            },
            {
              "name": "oval:org.mitre.oval:def:11389",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11389"
            },
            {
              "name": "RHSA-2006:0425",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0425.html"
            },
            {
              "name": "19838",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19838"
            },
            {
              "name": "20021",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20021"
            },
            {
              "name": "MDKSA-2006:082",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:082"
            },
            {
              "name": "19897",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19897"
            },
            {
              "name": "20023",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20023"
            },
            {
              "name": "SUSE-SR:2006:009",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2006_04_28.html"
            },
            {
              "name": "17733",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/17733"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-2026",
    "datePublished": "2006-04-25T23:00:00",
    "dateReserved": "2006-04-25T00:00:00",
    "dateUpdated": "2024-08-07T17:35:31.181Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2006-3465

Vulnerability from cvelistv5

Published

2006-08-03 01:00

Modified

2024-08-07 18:30

Severity ?

Summary

Unspecified vulnerability in the custom tag support for the TIFF library (libtiff) before 3.8.2 allows remote attackers to cause a denial of service (instability or crash) and execute arbitrary code via unknown vectors.

References

▼	URL	Tags
	ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P	vendor-advisory, x_refsource_SGI
	http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html	vendor-advisory, x_refsource_APPLE
	http://secunia.com/advisories/21501	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9067	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/21537	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21632	third-party-advisory, x_refsource_SECUNIA
	http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml	vendor-advisory, x_refsource_GENTOO
	http://secunia.com/advisories/21338	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/usn-330-1	vendor-advisory, x_refsource_UBUNTU
	http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm	x_refsource_CONFIRM
	http://www.vupen.com/english/advisories/2006/3101	vdb-entry, x_refsource_VUPEN
	http://securitytracker.com/id?1016628	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/21253	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2006/dsa-1137	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/21370	third-party-advisory, x_refsource_SECUNIA
	http://securitytracker.com/id?1016671	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/21598	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2006-0648.html	vendor-advisory, x_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=MDKSA-2006:137	vendor-advisory, x_refsource_MANDRIVA
	http://www.securityfocus.com/bid/19289	vdb-entry, x_refsource_BID
	http://www.vupen.com/english/advisories/2007/4034	vdb-entry, x_refsource_VUPEN
	http://www.us-cert.gov/cas/techalerts/TA06-214A.html	third-party-advisory, x_refsource_CERT
	http://www.novell.com/linux/security/advisories/2006_44_libtiff.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/21290	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21274	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2006/3105	vdb-entry, x_refsource_VUPEN
	http://www.osvdb.org/27729	vdb-entry, x_refsource_OSVDB
	http://www.redhat.com/support/errata/RHSA-2006-0603.html	vendor-advisory, x_refsource_REDHAT
	ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc	vendor-advisory, x_refsource_SGI
	http://secunia.com/advisories/21304	third-party-advisory, x_refsource_SECUNIA
	http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.536600	vendor-advisory, x_refsource_SLACKWARE
	http://docs.info.apple.com/article.html?artnum=304063	x_refsource_MISC
	https://issues.rpath.com/browse/RPL-558	x_refsource_CONFIRM
	http://secunia.com/advisories/27832	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21346	third-party-advisory, x_refsource_SECUNIA
	http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1	vendor-advisory, x_refsource_SUNALERT
	http://www.securityfocus.com/bid/19287	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/21319	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21392	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21334	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/22036	third-party-advisory, x_refsource_SECUNIA
	http://lwn.net/Alerts/194228/	vendor-advisory, x_refsource_TRUSTIX
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1	vendor-advisory, x_refsource_SUNALERT

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T18:30:33.913Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20060801-01-P",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P"
          },
          {
            "name": "APPLE-SA-2006-08-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html"
          },
          {
            "name": "21501",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21501"
          },
          {
            "name": "oval:org.mitre.oval:def:9067",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9067"
          },
          {
            "name": "21537",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21537"
          },
          {
            "name": "21632",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21632"
          },
          {
            "name": "GLSA-200608-07",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml"
          },
          {
            "name": "21338",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21338"
          },
          {
            "name": "USN-330-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-330-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm"
          },
          {
            "name": "ADV-2006-3101",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/3101"
          },
          {
            "name": "1016628",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016628"
          },
          {
            "name": "21253",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21253"
          },
          {
            "name": "DSA-1137",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1137"
          },
          {
            "name": "21370",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21370"
          },
          {
            "name": "1016671",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016671"
          },
          {
            "name": "21598",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21598"
          },
          {
            "name": "RHSA-2006:0648",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0648.html"
          },
          {
            "name": "MDKSA-2006:137",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:137"
          },
          {
            "name": "19289",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/19289"
          },
          {
            "name": "ADV-2007-4034",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/4034"
          },
          {
            "name": "TA06-214A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA06-214A.html"
          },
          {
            "name": "SUSE-SA:2006:044",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2006_44_libtiff.html"
          },
          {
            "name": "21290",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21290"
          },
          {
            "name": "21274",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21274"
          },
          {
            "name": "ADV-2006-3105",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/3105"
          },
          {
            "name": "27729",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/27729"
          },
          {
            "name": "RHSA-2006:0603",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0603.html"
          },
          {
            "name": "20060901-01-P",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc"
          },
          {
            "name": "21304",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21304"
          },
          {
            "name": "SSA:2006-230-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.536600"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://docs.info.apple.com/article.html?artnum=304063"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-558"
          },
          {
            "name": "27832",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27832"
          },
          {
            "name": "21346",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21346"
          },
          {
            "name": "201331",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1"
          },
          {
            "name": "19287",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/19287"
          },
          {
            "name": "21319",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21319"
          },
          {
            "name": "21392",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21392"
          },
          {
            "name": "21334",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21334"
          },
          {
            "name": "22036",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22036"
          },
          {
            "name": "2006-0044",
            "tags": [
              "vendor-advisory",
              "x_refsource_TRUSTIX",
              "x_transferred"
            ],
            "url": "http://lwn.net/Alerts/194228/"
          },
          {
            "name": "103160",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-08-01T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the custom tag support for the TIFF library (libtiff) before 3.8.2 allows remote attackers to cause a denial of service (instability or crash) and execute arbitrary code via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-10T00:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "20060801-01-P",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P"
        },
        {
          "name": "APPLE-SA-2006-08-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html"
        },
        {
          "name": "21501",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21501"
        },
        {
          "name": "oval:org.mitre.oval:def:9067",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9067"
        },
        {
          "name": "21537",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21537"
        },
        {
          "name": "21632",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21632"
        },
        {
          "name": "GLSA-200608-07",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml"
        },
        {
          "name": "21338",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21338"
        },
        {
          "name": "USN-330-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-330-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm"
        },
        {
          "name": "ADV-2006-3101",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/3101"
        },
        {
          "name": "1016628",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016628"
        },
        {
          "name": "21253",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21253"
        },
        {
          "name": "DSA-1137",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1137"
        },
        {
          "name": "21370",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21370"
        },
        {
          "name": "1016671",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016671"
        },
        {
          "name": "21598",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21598"
        },
        {
          "name": "RHSA-2006:0648",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0648.html"
        },
        {
          "name": "MDKSA-2006:137",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:137"
        },
        {
          "name": "19289",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/19289"
        },
        {
          "name": "ADV-2007-4034",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/4034"
        },
        {
          "name": "TA06-214A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA06-214A.html"
        },
        {
          "name": "SUSE-SA:2006:044",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2006_44_libtiff.html"
        },
        {
          "name": "21290",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21290"
        },
        {
          "name": "21274",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21274"
        },
        {
          "name": "ADV-2006-3105",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/3105"
        },
        {
          "name": "27729",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/27729"
        },
        {
          "name": "RHSA-2006:0603",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0603.html"
        },
        {
          "name": "20060901-01-P",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc"
        },
        {
          "name": "21304",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21304"
        },
        {
          "name": "SSA:2006-230-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.536600"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://docs.info.apple.com/article.html?artnum=304063"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-558"
        },
        {
          "name": "27832",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27832"
        },
        {
          "name": "21346",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21346"
        },
        {
          "name": "201331",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1"
        },
        {
          "name": "19287",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/19287"
        },
        {
          "name": "21319",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21319"
        },
        {
          "name": "21392",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21392"
        },
        {
          "name": "21334",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21334"
        },
        {
          "name": "22036",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22036"
        },
        {
          "name": "2006-0044",
          "tags": [
            "vendor-advisory",
            "x_refsource_TRUSTIX"
          ],
          "url": "http://lwn.net/Alerts/194228/"
        },
        {
          "name": "103160",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2006-3465",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the custom tag support for the TIFF library (libtiff) before 3.8.2 allows remote attackers to cause a denial of service (instability or crash) and execute arbitrary code via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20060801-01-P",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P"
            },
            {
              "name": "APPLE-SA-2006-08-01",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html"
            },
            {
              "name": "21501",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21501"
            },
            {
              "name": "oval:org.mitre.oval:def:9067",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9067"
            },
            {
              "name": "21537",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21537"
            },
            {
              "name": "21632",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21632"
            },
            {
              "name": "GLSA-200608-07",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml"
            },
            {
              "name": "21338",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21338"
            },
            {
              "name": "USN-330-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-330-1"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm"
            },
            {
              "name": "ADV-2006-3101",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/3101"
            },
            {
              "name": "1016628",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016628"
            },
            {
              "name": "21253",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21253"
            },
            {
              "name": "DSA-1137",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1137"
            },
            {
              "name": "21370",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21370"
            },
            {
              "name": "1016671",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016671"
            },
            {
              "name": "21598",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21598"
            },
            {
              "name": "RHSA-2006:0648",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0648.html"
            },
            {
              "name": "MDKSA-2006:137",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:137"
            },
            {
              "name": "19289",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/19289"
            },
            {
              "name": "ADV-2007-4034",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/4034"
            },
            {
              "name": "TA06-214A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA06-214A.html"
            },
            {
              "name": "SUSE-SA:2006:044",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2006_44_libtiff.html"
            },
            {
              "name": "21290",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21290"
            },
            {
              "name": "21274",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21274"
            },
            {
              "name": "ADV-2006-3105",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/3105"
            },
            {
              "name": "27729",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/27729"
            },
            {
              "name": "RHSA-2006:0603",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0603.html"
            },
            {
              "name": "20060901-01-P",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc"
            },
            {
              "name": "21304",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21304"
            },
            {
              "name": "SSA:2006-230-01",
              "refsource": "SLACKWARE",
              "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.536600"
            },
            {
              "name": "http://docs.info.apple.com/article.html?artnum=304063",
              "refsource": "MISC",
              "url": "http://docs.info.apple.com/article.html?artnum=304063"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-558",
              "refsource": "CONFIRM",
              "url": "https://issues.rpath.com/browse/RPL-558"
            },
            {
              "name": "27832",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27832"
            },
            {
              "name": "21346",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21346"
            },
            {
              "name": "201331",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1"
            },
            {
              "name": "19287",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/19287"
            },
            {
              "name": "21319",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21319"
            },
            {
              "name": "21392",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21392"
            },
            {
              "name": "21334",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21334"
            },
            {
              "name": "22036",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22036"
            },
            {
              "name": "2006-0044",
              "refsource": "TRUSTIX",
              "url": "http://lwn.net/Alerts/194228/"
            },
            {
              "name": "103160",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2006-3465",
    "datePublished": "2006-08-03T01:00:00",
    "dateReserved": "2006-07-10T00:00:00",
    "dateUpdated": "2024-08-07T18:30:33.913Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2006-3462

Vulnerability from cvelistv5

Published

2006-08-03 01:00

Modified

2024-08-07 18:30

Severity ?

Summary

Heap-based buffer overflow in the NeXT RLE decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors involving decoding large RLE images.

References

▼	URL	Tags
	ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P	vendor-advisory, x_refsource_SGI
	http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html	vendor-advisory, x_refsource_APPLE
	http://www.vupen.com/english/advisories/2007/3486	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/21501	third-party-advisory, x_refsource_SECUNIA
	http://www.mandriva.com/security/advisories?name=MDKSA-2006:136	vendor-advisory, x_refsource_MANDRIVA
	http://secunia.com/advisories/21537	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21632	third-party-advisory, x_refsource_SECUNIA
	http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml	vendor-advisory, x_refsource_GENTOO
	http://secunia.com/advisories/21338	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/usn-330-1	vendor-advisory, x_refsource_UBUNTU
	http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm	x_refsource_CONFIRM
	http://www.osvdb.org/27726	vdb-entry, x_refsource_OSVDB
	http://www.vupen.com/english/advisories/2006/3101	vdb-entry, x_refsource_VUPEN
	http://securitytracker.com/id?1016628	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/21253	third-party-advisory, x_refsource_SECUNIA
	http://www.debian.org/security/2006/dsa-1137	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/21370	third-party-advisory, x_refsource_SECUNIA
	http://securitytracker.com/id?1016671	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/21598	third-party-advisory, x_refsource_SECUNIA
	http://www.redhat.com/support/errata/RHSA-2006-0648.html	vendor-advisory, x_refsource_REDHAT
	http://www.mandriva.com/security/advisories?name=MDKSA-2006:137	vendor-advisory, x_refsource_MANDRIVA
	http://www.securityfocus.com/bid/19289	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/27222	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2007/4034	vdb-entry, x_refsource_VUPEN
	http://www.us-cert.gov/cas/techalerts/TA06-214A.html	third-party-advisory, x_refsource_CERT
	http://www.novell.com/linux/security/advisories/2006_44_libtiff.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/21290	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21274	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2006/3105	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/27181	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11301	vdb-entry, signature, x_refsource_OVAL
	http://www.redhat.com/support/errata/RHSA-2006-0603.html	vendor-advisory, x_refsource_REDHAT
	ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc	vendor-advisory, x_refsource_SGI
	http://secunia.com/advisories/21304	third-party-advisory, x_refsource_SECUNIA
	http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.536600	vendor-advisory, x_refsource_SLACKWARE
	http://docs.info.apple.com/article.html?artnum=304063	x_refsource_MISC
	http://www.securityfocus.com/bid/19282	vdb-entry, x_refsource_BID
	https://issues.rpath.com/browse/RPL-558	x_refsource_CONFIRM
	http://secunia.com/advisories/27832	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21346	third-party-advisory, x_refsource_SECUNIA
	http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1	vendor-advisory, x_refsource_SUNALERT
	http://secunia.com/advisories/21319	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21392	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/21334	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/22036	third-party-advisory, x_refsource_SECUNIA
	http://lwn.net/Alerts/194228/	vendor-advisory, x_refsource_TRUSTIX
	http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1	vendor-advisory, x_refsource_SUNALERT

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T18:30:33.554Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20060801-01-P",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P"
          },
          {
            "name": "APPLE-SA-2006-08-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html"
          },
          {
            "name": "ADV-2007-3486",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/3486"
          },
          {
            "name": "21501",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21501"
          },
          {
            "name": "MDKSA-2006:136",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:136"
          },
          {
            "name": "21537",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21537"
          },
          {
            "name": "21632",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21632"
          },
          {
            "name": "GLSA-200608-07",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml"
          },
          {
            "name": "21338",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21338"
          },
          {
            "name": "USN-330-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-330-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm"
          },
          {
            "name": "27726",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/27726"
          },
          {
            "name": "ADV-2006-3101",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/3101"
          },
          {
            "name": "1016628",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016628"
          },
          {
            "name": "21253",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21253"
          },
          {
            "name": "DSA-1137",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1137"
          },
          {
            "name": "21370",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21370"
          },
          {
            "name": "1016671",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016671"
          },
          {
            "name": "21598",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21598"
          },
          {
            "name": "RHSA-2006:0648",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0648.html"
          },
          {
            "name": "MDKSA-2006:137",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:137"
          },
          {
            "name": "19289",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/19289"
          },
          {
            "name": "27222",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27222"
          },
          {
            "name": "ADV-2007-4034",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/4034"
          },
          {
            "name": "TA06-214A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA06-214A.html"
          },
          {
            "name": "SUSE-SA:2006:044",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2006_44_libtiff.html"
          },
          {
            "name": "21290",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21290"
          },
          {
            "name": "21274",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21274"
          },
          {
            "name": "ADV-2006-3105",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/3105"
          },
          {
            "name": "27181",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27181"
          },
          {
            "name": "oval:org.mitre.oval:def:11301",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11301"
          },
          {
            "name": "RHSA-2006:0603",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0603.html"
          },
          {
            "name": "20060901-01-P",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc"
          },
          {
            "name": "21304",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21304"
          },
          {
            "name": "SSA:2006-230-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.536600"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://docs.info.apple.com/article.html?artnum=304063"
          },
          {
            "name": "19282",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/19282"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-558"
          },
          {
            "name": "27832",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27832"
          },
          {
            "name": "21346",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21346"
          },
          {
            "name": "201331",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1"
          },
          {
            "name": "21319",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21319"
          },
          {
            "name": "21392",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21392"
          },
          {
            "name": "21334",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21334"
          },
          {
            "name": "22036",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22036"
          },
          {
            "name": "2006-0044",
            "tags": [
              "vendor-advisory",
              "x_refsource_TRUSTIX",
              "x_transferred"
            ],
            "url": "http://lwn.net/Alerts/194228/"
          },
          {
            "name": "103160",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-08-01T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in the NeXT RLE decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors involving decoding large RLE images."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-10T00:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "20060801-01-P",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P"
        },
        {
          "name": "APPLE-SA-2006-08-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html"
        },
        {
          "name": "ADV-2007-3486",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/3486"
        },
        {
          "name": "21501",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21501"
        },
        {
          "name": "MDKSA-2006:136",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:136"
        },
        {
          "name": "21537",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21537"
        },
        {
          "name": "21632",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21632"
        },
        {
          "name": "GLSA-200608-07",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml"
        },
        {
          "name": "21338",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21338"
        },
        {
          "name": "USN-330-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-330-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm"
        },
        {
          "name": "27726",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/27726"
        },
        {
          "name": "ADV-2006-3101",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/3101"
        },
        {
          "name": "1016628",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016628"
        },
        {
          "name": "21253",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21253"
        },
        {
          "name": "DSA-1137",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1137"
        },
        {
          "name": "21370",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21370"
        },
        {
          "name": "1016671",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016671"
        },
        {
          "name": "21598",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21598"
        },
        {
          "name": "RHSA-2006:0648",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0648.html"
        },
        {
          "name": "MDKSA-2006:137",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:137"
        },
        {
          "name": "19289",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/19289"
        },
        {
          "name": "27222",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27222"
        },
        {
          "name": "ADV-2007-4034",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/4034"
        },
        {
          "name": "TA06-214A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA06-214A.html"
        },
        {
          "name": "SUSE-SA:2006:044",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2006_44_libtiff.html"
        },
        {
          "name": "21290",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21290"
        },
        {
          "name": "21274",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21274"
        },
        {
          "name": "ADV-2006-3105",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/3105"
        },
        {
          "name": "27181",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27181"
        },
        {
          "name": "oval:org.mitre.oval:def:11301",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11301"
        },
        {
          "name": "RHSA-2006:0603",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0603.html"
        },
        {
          "name": "20060901-01-P",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc"
        },
        {
          "name": "21304",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21304"
        },
        {
          "name": "SSA:2006-230-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.536600"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://docs.info.apple.com/article.html?artnum=304063"
        },
        {
          "name": "19282",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/19282"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-558"
        },
        {
          "name": "27832",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27832"
        },
        {
          "name": "21346",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21346"
        },
        {
          "name": "201331",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1"
        },
        {
          "name": "21319",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21319"
        },
        {
          "name": "21392",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21392"
        },
        {
          "name": "21334",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21334"
        },
        {
          "name": "22036",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22036"
        },
        {
          "name": "2006-0044",
          "tags": [
            "vendor-advisory",
            "x_refsource_TRUSTIX"
          ],
          "url": "http://lwn.net/Alerts/194228/"
        },
        {
          "name": "103160",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2006-3462",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in the NeXT RLE decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors involving decoding large RLE images."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20060801-01-P",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P"
            },
            {
              "name": "APPLE-SA-2006-08-01",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html"
            },
            {
              "name": "ADV-2007-3486",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/3486"
            },
            {
              "name": "21501",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21501"
            },
            {
              "name": "MDKSA-2006:136",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:136"
            },
            {
              "name": "21537",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21537"
            },
            {
              "name": "21632",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21632"
            },
            {
              "name": "GLSA-200608-07",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200608-07.xml"
            },
            {
              "name": "21338",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21338"
            },
            {
              "name": "USN-330-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-330-1"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm"
            },
            {
              "name": "27726",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/27726"
            },
            {
              "name": "ADV-2006-3101",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/3101"
            },
            {
              "name": "1016628",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016628"
            },
            {
              "name": "21253",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21253"
            },
            {
              "name": "DSA-1137",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-1137"
            },
            {
              "name": "21370",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21370"
            },
            {
              "name": "1016671",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016671"
            },
            {
              "name": "21598",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21598"
            },
            {
              "name": "RHSA-2006:0648",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0648.html"
            },
            {
              "name": "MDKSA-2006:137",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:137"
            },
            {
              "name": "19289",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/19289"
            },
            {
              "name": "27222",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27222"
            },
            {
              "name": "ADV-2007-4034",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/4034"
            },
            {
              "name": "TA06-214A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA06-214A.html"
            },
            {
              "name": "SUSE-SA:2006:044",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2006_44_libtiff.html"
            },
            {
              "name": "21290",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21290"
            },
            {
              "name": "21274",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21274"
            },
            {
              "name": "ADV-2006-3105",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/3105"
            },
            {
              "name": "27181",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27181"
            },
            {
              "name": "oval:org.mitre.oval:def:11301",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11301"
            },
            {
              "name": "RHSA-2006:0603",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0603.html"
            },
            {
              "name": "20060901-01-P",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc"
            },
            {
              "name": "21304",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21304"
            },
            {
              "name": "SSA:2006-230-01",
              "refsource": "SLACKWARE",
              "url": "http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2006\u0026m=slackware-security.536600"
            },
            {
              "name": "http://docs.info.apple.com/article.html?artnum=304063",
              "refsource": "MISC",
              "url": "http://docs.info.apple.com/article.html?artnum=304063"
            },
            {
              "name": "19282",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/19282"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-558",
              "refsource": "CONFIRM",
              "url": "https://issues.rpath.com/browse/RPL-558"
            },
            {
              "name": "27832",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27832"
            },
            {
              "name": "21346",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21346"
            },
            {
              "name": "201331",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1"
            },
            {
              "name": "21319",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21319"
            },
            {
              "name": "21392",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21392"
            },
            {
              "name": "21334",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21334"
            },
            {
              "name": "22036",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22036"
            },
            {
              "name": "2006-0044",
              "refsource": "TRUSTIX",
              "url": "http://lwn.net/Alerts/194228/"
            },
            {
              "name": "103160",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2006-3462",
    "datePublished": "2006-08-03T01:00:00",
    "dateReserved": "2006-07-10T00:00:00",
    "dateUpdated": "2024-08-07T18:30:33.554Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_redhat

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature