CVE-2006-2024
CVE-2006-2024
Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a TIFF image that triggers errors in (1) the TIFFFetchAnyArray function in (a) tif_dirread.c; (2) certain "codec cleanup methods" in (b) tif_lzw.c, (c) tif_pixarlog.c, and (d) tif_zip.c; (3) and improper restoration of setfield and getfield methods in cleanup functions within (e) tif_jpeg.c, tif_pixarlog.c, (f) tif_fax3.c, and tif_zip.c.
Affected products
n/a · n/apublic PoCs found — 1
exploitdbwww.exploit-db.com/exploits/27762unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.aschttp://bugzilla.remotesensing.org/show_bug.cgi?id=1102https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189933http://secunia.com/advisories/19838http://secunia.com/advisories/19851http://secunia.com/advisories/19897http://secunia.com/advisories/19936http://secunia.com/advisories/19949http://secunia.com/advisories/19964http://secunia.com/advisories/20021http://secunia.com/advisories/20023http://secunia.com/advisories/20210