Lucene search

K
ubuntucveUbuntu.comUB:CVE-2006-2193
HistoryJun 08, 2006 - 12:00 a.m.

CVE-2006-2193

2006-06-0800:00:00
ubuntu.com
ubuntu.com
9

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

88.1%

Buffer overflow in the t2p_write_pdf_string function in tiff2pdf in libtiff
3.8.2 and earlier allows attackers to cause a denial of service (crash) and
possibly execute arbitrary code via a TIFF file with a DocumentName tag
that contains UTF-8 characters, which triggers the overflow when a
character is sign extended to an integer that produces more digits than
expected in an sprintf call.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchtiff< 3.7.4-1ubuntu3.2UNKNOWN
ubuntu6.10noarchtiff< 3.8.2-6UNKNOWN
ubuntu7.04noarchtiff< 3.8.2-6UNKNOWN

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

88.1%