CVE-2006-2026

Double free vulnerability in tif_jpeg.c in libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image that triggers errors related to "setfield/getfield methods in cleanup functions."

CVSS v2.0 NVD

6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

10.05% chance of exploitation in the next 30 days, 96th percentile

Published

2006-04-25

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/27765

Security advisories

• http://secunia.com/advisories/19838
• http://secunia.com/advisories/19897
• http://secunia.com/advisories/19936
• http://secunia.com/advisories/19949
• http://secunia.com/advisories/19964
• http://secunia.com/advisories/20021
• http://secunia.com/advisories/20023
• http://secunia.com/advisories/20210
• http://secunia.com/advisories/20345
• http://secunia.com/advisories/20667
• http://bugzilla.remotesensing.org/show_bug.cgi?id=1102
• https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189933
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:082
• http://www.redhat.com/support/errata/RHSA-2006-0425.html
• http://www.securityfocus.com/bid/17733
• https://usn.ubuntu.com/277-1

References

• CVE Record
• NVD entry