CVE-2006-3464

TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to pass numeric range checks and possibly execute code, and trigger assert errors, via…

published August 3, 2006

CVSS
—
EPSS
4%
Percentile
89.2
In the wild
Unconfirmed
What it is

TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to pass numeric range checks and possibly execute code, and trigger assert errors, via large offset values in a TIFF directory that lead to an integer overflow and other unspecified vectors involving "unchecked arithmetic operations".

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03531 · 89.2th percentile
Published
2006-08-03T01:00Z
EPSS history
Timeline
  • 03 AUG 01:00Z
    TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to pass numeric range checks and possibly execute code, and trigger assert errors, via…
    cvelistv5