NVD

Id
61341  
Name
CVE-2006-2656  
Description
Stack-based buffer overflow in the tiffsplit command in libtiff 3.8.2 and earlier might might allow attackers to execute arbitrary code via a long filename. NOTE: tiffsplit is not setuid. If there is not a common scenario under which tiffsplit is called with attacker-controlled command line arguments, then perhaps this issue should not be included in CVE.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-05-30  
Modified Date
2016-10-17  
Seq
2006-2656  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
316969 61341 CVE-2006-2656 SUSE-SR:2006:014  View
316970 61341 CVE-2006-2656 20060524 tiffsplit (libtiff <= 3.8.2) bss & stack buffer overflow...  View
316971 61341 CVE-2006-2656 GLSA-200607-03  View
316972 61341 CVE-2006-2656 DSA-1091  View
316973 61341 CVE-2006-2656 MDKSA-2006:095  View
316974 61341 CVE-2006-2656 USN-289-1  View
316975 61341 CVE-2006-2656 FEDORA-2006-591  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58724 JVNDB-2006-000990 libtiff の tiffsplit コマンドにおけるバッファオーバーフローの脆弱性 libtiff の tiffsplit コマンドにはファイル名の処理に不備があるため、バッファオーバーフローの脆弱性が存在します。 CVE-2006-2656 18758 CVE-2006-2656 61341 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000990.html 2006-05-30 2008-09-26 View