Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2006-2025

Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted TIFF image.

  • Published: Apr 26, 2006
  • Updated: Apr 13, 2023
  • CVE: CVE-2006-2025
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/Au:S/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
libtiff / libtiff 3.6.1 3.6.1.x
libtiff / libtiff 3.4 3.4.x
libtiff / libtiff 3.5.7 3.5.7.x
libtiff / libtiff 3.7.0 3.7.0.x
libtiff / libtiff 3.6.0 3.6.0.x
libtiff / libtiff 3.5.3 3.5.3.x
libtiff / libtiff 3.7.1 3.7.1.x
libtiff / libtiff 3.5.4 3.5.4.x
libtiff / libtiff 3.5.2 3.5.2.x
libtiff / libtiff 3.5.5 3.5.5.x
libtiff / libtiff - 3.8.0.x
libtiff / libtiff 3.5.1 3.5.1.x
libtiff / libtiff 3.5.6 3.5.6.x