Back to feed
EUVD-2006-2121 · Published May 1, 2006
The TIFFToRGB function in libtiff before 3.8.1 allows remote attackers to cause a denial of service (crash) via a crafted TIFF image with Yr/Yg/Yb values that exceed the YCR/YCG/YCB values, which triggers an out-of-bounds read.
Technologies
Libtiff Libtiff
Weaknesses
NVD-CWE-Other
CVSS scores
- v2.02.1
AV:L/AC:L/Au:N/C:N/I:N/A:P
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Privilege Escalation
References
Potentially impacted assets
See if this affects your attack surface
