CVE-2006-3459

CVE-2006-3459

Published · Updated

Follow this CVE+ Monitor tiff

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

50Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 56%
from disclosure to weapon1322 days
Published on NVDAug 3
1st PoC+1322d
metasploitAug 1
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Fixed
8 products (244 components)
Red Hat Desktop version 3 · Red Hat Enterprise Linux AS version 3 · Red Hat Enterprise Linux ES version 3 · Red Hat Enterprise Linux WS version 3 · Red Hat Enterprise Linux AS version 4 · and others 3
fix ↗
Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow context-dependent attackers to execute arbitrary code or cause a denial of service via unspecified vectors, including a large tdir_count value in the TIFFFetchShortPair function in tif_dirread.c.
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.