Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2006-2026

Double free vulnerability in tif_jpeg.c in libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image that triggers errors related to "setfield/getfield methods in cleanup functions."

  • Published: Apr 26, 2006
  • Updated: Apr 13, 2023
  • CVE: CVE-2006-2026
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/Au:S/C:P/I:P/A:P

CWEs:

Software From Fixed in
libtiff / libtiff 3.6.1 3.6.1.x
libtiff / libtiff 3.4 3.4.x
libtiff / libtiff 3.5.7 3.5.7.x
libtiff / libtiff 3.7.0 3.7.0.x
libtiff / libtiff 3.6.0 3.6.0.x
libtiff / libtiff 3.5.3 3.5.3.x
libtiff / libtiff 3.7.1 3.7.1.x
libtiff / libtiff 3.5.4 3.5.4.x
libtiff / libtiff 3.5.2 3.5.2.x
libtiff / libtiff 3.5.5 3.5.5.x
libtiff / libtiff - 3.8.0.x
libtiff / libtiff 3.5.1 3.5.1.x
libtiff / libtiff 3.5.6 3.5.6.x