security flaw

🗓️ 28 Aug 2006 11:41:00Reported by RedHatType

Double free in tif_jpeg.c of libtiff before 3.8.1 allows context dependent attackers to crash or execute code via crafted TIFF images.

Reporter	Title	Published	Views	Family All 46
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
CVE	CAN-2006-2026	6 Aug 202408:51	–	cve
CVE	CVE-2006-2026	25 Apr 200623:00	–	cve
Tenable Nessus	CentOS 3 / 4 : libtiff (CESA-2006:0425)	3 Jul 200600:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	any	i386	kdegraphics	7:3.1.3-3.10	kdegraphics-7:3.1.3-3.10.i386.rpm
Red Hat Enterprise Linux	any	ia64	kdegraphics	7:3.1.3-3.10	kdegraphics-7:3.1.3-3.10.ia64.rpm
Red Hat Enterprise Linux	any	ppc	kdegraphics	7:3.1.3-3.10	kdegraphics-7:3.1.3-3.10.ppc.rpm
Red Hat Enterprise Linux	any	s390	kdegraphics	7:3.1.3-3.10	kdegraphics-7:3.1.3-3.10.s390.rpm
Red Hat Enterprise Linux	any	s390x	kdegraphics	7:3.1.3-3.10	kdegraphics-7:3.1.3-3.10.s390x.rpm
Red Hat Enterprise Linux	any	x86_64	kdegraphics	7:3.1.3-3.10	kdegraphics-7:3.1.3-3.10.x86_64.rpm
Red Hat Enterprise Linux	any	i386	kdegraphics-debuginfo	7:3.1.3-3.10	kdegraphics-debuginfo-7:3.1.3-3.10.i386.rpm
Red Hat Enterprise Linux	any	ia64	kdegraphics-debuginfo	7:3.1.3-3.10	kdegraphics-debuginfo-7:3.1.3-3.10.ia64.rpm
Red Hat Enterprise Linux	any	ppc	kdegraphics-debuginfo	7:3.1.3-3.10	kdegraphics-debuginfo-7:3.1.3-3.10.ppc.rpm
Red Hat Enterprise Linux	any	s390	kdegraphics-debuginfo	7:3.1.3-3.10	kdegraphics-debuginfo-7:3.1.3-3.10.s390.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2006-2026
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2006-2026
cve	www.cve.org/CVERecord

25 Jun 2026 10:33Current

6.2Medium risk

Vulners AI Score6.2

CVSS 26.5

EPSS0.09742