NVD

Id
60897  
Name
CVE-2006-2193  
Description
Buffer overflow in the t2p_write_pdf_string function in tiff2pdf in libtiff 3.8.2 and earlier allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a TIFF file with a DocumentName tag that contains UTF-8 characters, which triggers the overflow when a character is sign extended to an integer that produces more digits than expected in an sprintf call.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-06-08  
Modified Date
2013-08-17  
Seq
2006-2193  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
314433 60897 CVE-2006-2193 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=370355  View
314434 60897 CVE-2006-2193 http://bugzilla.remotesensing.org/show_bug.cgi?id=1196  View
314435 60897 CVE-2006-2193 SUSE-SR:2006:014  View
314436 60897 CVE-2006-2193 oval:org.mitre.oval:def:9788  View
314437 60897 CVE-2006-2193 GLSA-200607-03  View
314438 60897 CVE-2006-2193 103160  View
314439 60897 CVE-2006-2193 201331  View
314440 60897 CVE-2006-2193 DSA-1091  View
314441 60897 CVE-2006-2193 MDKSA-2006:102  View
314442 60897 CVE-2006-2193 RHSA-2008:0848  View
314443 60897 CVE-2006-2193 18331  View
314444 60897 CVE-2006-2193 USN-289-1  View
314445 60897 CVE-2006-2193 ADV-2006-2197  View
314446 60897 CVE-2006-2193 ADV-2007-3486  View
314447 60897 CVE-2006-2193 ADV-2007-4034  View
314448 60897 CVE-2006-2193 libtiff-tiff2pdf-bo(26991)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58710 JVNDB-2006-000976 LibTIFF の tiff2pdf におけるバッファオーバーフローの脆弱性 LibTIFF の tiff2pdf には、t2p_write_pdf_string() 関数において DocumentName タグに UTF-8 文字を含む TIFF ファイルを処理した際に、バッファオーバーフローの脆弱性が存在します。 CVE-2006-2193 18295 CVE-2006-2193 60897 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000976.html 2006-06-08 2008-09-12 View