tiff2pdf buffer overflow

🗓️ 28 Aug 2008 22:23:00Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 1 Views

Buffer overflow in tiff2pdf may crash or allow code execution via UTF-8 in a DocumentName tag.

Reporter	Title	Published	Views	Family All 41
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the CentOS operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
Tenable Nessus	CentOS 4 : libtiff (CESA-2008:0848)	29 Jun 201300:00	–	nessus
Tenable Nessus	Debian DSA-1091-1 : tiff - buffer overflows	14 Oct 200600:00	–	nessus
Tenable Nessus	Fedora Core 5 : libtiff-3.8.2-1.fc5 (2006-952)	17 Jan 200700:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	4	i386	libtiff	0:3.6.1-12.el4_7.2	libtiff-0:3.6.1-12.el4_7.2.i386.rpm
Red Hat Enterprise Linux	4	ia64	libtiff	0:3.6.1-12.el4_7.2	libtiff-0:3.6.1-12.el4_7.2.ia64.rpm
Red Hat Enterprise Linux	4	ppc	libtiff	0:3.6.1-12.el4_7.2	libtiff-0:3.6.1-12.el4_7.2.ppc.rpm
Red Hat Enterprise Linux	4	ppc64	libtiff	0:3.6.1-12.el4_7.2	libtiff-0:3.6.1-12.el4_7.2.ppc64.rpm
Red Hat Enterprise Linux	4	s390	libtiff	0:3.6.1-12.el4_7.2	libtiff-0:3.6.1-12.el4_7.2.s390.rpm
Red Hat Enterprise Linux	4	s390x	libtiff	0:3.6.1-12.el4_7.2	libtiff-0:3.6.1-12.el4_7.2.s390x.rpm
Red Hat Enterprise Linux	4	x86_64	libtiff	0:3.6.1-12.el4_7.2	libtiff-0:3.6.1-12.el4_7.2.x86_64.rpm
Red Hat Enterprise Linux	4	i386	libtiff-debuginfo	0:3.6.1-12.el4_7.2	libtiff-debuginfo-0:3.6.1-12.el4_7.2.i386.rpm
Red Hat Enterprise Linux	4	ia64	libtiff-debuginfo	0:3.6.1-12.el4_7.2	libtiff-debuginfo-0:3.6.1-12.el4_7.2.ia64.rpm
Red Hat Enterprise Linux	4	ppc	libtiff-debuginfo	0:3.6.1-12.el4_7.2	libtiff-debuginfo-0:3.6.1-12.el4_7.2.ppc.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2006-2193
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2006-2193
cve	www.cve.org/CVERecord

25 Jun 2026 10:35Current

7.7High risk

Vulners AI Score7.7

CVSS 27.5

EPSS0.05358

buffer overflow tiff2pdf document name tag utf eight libtiff vulnerability denial of service code execution unix