CVE-2006-3459

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 53.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-08-03 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow context-dependent attackers to execute arbitrary code or cause a denial of service via unspecified vectors, including a large tdir_count value in the TIFFFetchShortPair function in tif_dirread.c.

Affected products

libtiff: through 3.8.1; 3.4, 3.4-beta18, 3.4-beta24, 3.4-beta28, 3.4-beta29, 3.4-beta31 (+31)

References

http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html
http://lwn.net/Alerts/194228/
http://secunia.com/advisories/21253
http://secunia.com/advisories/21274
http://secunia.com/advisories/21290
http://secunia.com/advisories/21304
http://secunia.com/advisories/21319
http://secunia.com/advisories/21334
http://secunia.com/advisories/21338
http://secunia.com/advisories/21346

Get alerted when CVE-2006-3459 or the next vulnerability affects your stack