Skip to content
OpenAdvisories
Unscored DSA-1137-1 7 CVEs

tiff - several vulnerabilities

Published Aug 2, 2006 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 3.1 tiff 3.7.2-7

Vulnerabilities 7

  • Unscored —
    CVE-2006-3459 Public exploit EPSS 56%

    Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and oth…

    tiff Debian
  • Unscored —
    CVE-2006-3460

    Heap-based buffer overflow in the JPEG decoder in the TIFF library (libtiff) before 3.8.2 allows context-dependent atta…

    tiff Debian
  • Unscored —
    CVE-2006-3461

    Heap-based buffer overflow in the PixarLog decoder in the TIFF library (libtiff) before 3.8.2 might allow context-depen…

    tiff Debian
  • Unscored —
    CVE-2006-3462

    Heap-based buffer overflow in the NeXT RLE decoder in the TIFF library (libtiff) before 3.8.2 might allow context-depen…

    tiff Debian
  • Unscored —
    CVE-2006-3463

    The EstimateStripByteCounts function in TIFF library (libtiff) before 3.8.2 uses a 16-bit unsigned short when iterating…

    tiff Debian
  • Unscored —
    CVE-2006-3464

    TIFF library (libtiff) before 3.8.2 allows context-dependent attackers to pass numeric range checks and possibly execut…

    tiff Debian
  • Unscored —
    CVE-2006-3465

    Unspecified vulnerability in the custom tag support for the TIFF library (libtiff) before 3.8.2 allows remote attackers…

    tiff Debian