tiff vulnerabilities

2006-06-0800:00:00

ubuntu.com

7.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.029 Low

EPSS

Percentile

90.7%

JSON

Releases

Ubuntu 6.06
Ubuntu 5.10
Ubuntu 5.04

Details

A buffer overflow has been found in the tiff2pdf utility. By tricking
an user into processing a specially crafted TIF file with tiff2pdf,
this could potentially be exploited to execute arbitrary code with the
privileges of the user. (CVE-2006-2193)

A. Alejandro Hernández discovered a buffer overflow in the tiffsplit
utility. By calling tiffsplit with specially crafted long arguments,
an user can execute arbitrary code. If tiffsplit is used in e. g. a
web-based frontend or similar automated system, this could lead to
remote arbitary code execution with the privileges of that system. (In
normal interactive command line usage this is not a vulnerability.)
(CVE-2006-2656)

OSVersionArchitecturePackageVersionFilename
Ubuntu6.06noarchlibtiff-tools< 3.7.4-1ubuntu3.1UNKNOWN
Ubuntu5.10noarchlibtiff-tools< 3.7.3-1ubuntu1.4UNKNOWN
Ubuntu5.04noarchlibtiff-tools< 3.6.1-5ubuntu0.5UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	6.06	noarch	libtiff-tools	< 3.7.4-1ubuntu3.1	UNKNOWN
Ubuntu	5.10	noarch	libtiff-tools	< 3.7.3-1ubuntu1.4	UNKNOWN
Ubuntu	5.04	noarch	libtiff-tools	< 3.6.1-5ubuntu0.5	UNKNOWN