What’s Vulnerable › Vulnerabilities

CVE-2006-2193

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2006-06-08 · updated 2026-06-16

Description

Buffer overflow in the t2p_write_pdf_string function in tiff2pdf in libtiff 3.8.2 and earlier allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a TIFF file with a DocumentName tag that contains UTF-8 characters, which triggers the overflow when a character is sign extended to an integer that produces more digits than expected in an sprintf call.

Affected products

• libtiff: through 3.8.2; 3.4, 3.5.1, 3.5.2, 3.5.3, 3.5.4, 3.5.5 (+8)

References

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=370355
• http://bugzilla.remotesensing.org/show_bug.cgi?id=1196
• http://lists.suse.com/archive/suse-security-announce/2006-Jun/0008.html
• http://secunia.com/advisories/20488
• http://secunia.com/advisories/20501
• http://secunia.com/advisories/20520
• http://secunia.com/advisories/20693
• http://secunia.com/advisories/20766
• http://secunia.com/advisories/21002
• http://secunia.com/advisories/27181
• http://secunia.com/advisories/27222
• http://secunia.com/advisories/27832

Get alerted when CVE-2006-2193 or the next vulnerability affects your stack