Lucene search

K
cve[email protected]CVE-2006-3461
HistoryAug 03, 2006 - 1:04 a.m.

CVE-2006-3461

2006-08-0301:04:00
NVD-CWE-Other
web.nvd.nist.gov
37
cve-2006-3461
nvd
tiff library
libtiff
buffer overflow
pixarlog decoder
arbitrary code exec
security vulnerability

7.5 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.037 Low

EPSS

Percentile

91.7%

Heap-based buffer overflow in the PixarLog decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors.

CPENameOperatorVersion
libtiff:libtifflibtiffle3.8.1

References

7.5 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.037 Low

EPSS

Percentile

91.7%