CVE-2006-3459

Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow context-dependent attackers to execute arbitrary code or cause a denial of service via unspecified vectors, including a large tdir_count value in the TIFFFetchShortPair function in tif_dirread.c.

🔗 References (94)

• secalert@redhatftp://patches.sgi.com/support/free/security/advisories/20060801-01-P
• secalert@redhatftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc
• secalert@redhathttp://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html
• secalert@redhathttp://lwn.net/Alerts/194228/
• secalert@redhathttp://secunia.com/advisories/21253
• secalert@redhathttp://secunia.com/advisories/21274
• secalert@redhathttp://secunia.com/advisories/21290
• secalert@redhathttp://secunia.com/advisories/21304
• secalert@redhathttp://secunia.com/advisories/21319
• secalert@redhathttp://secunia.com/advisories/21334
• secalert@redhathttp://secunia.com/advisories/21338
• secalert@redhathttp://secunia.com/advisories/21346
• secalert@redhathttp://secunia.com/advisories/21370
• secalert@redhathttp://secunia.com/advisories/21392
• secalert@redhathttp://secunia.com/advisories/21501