What’s Vulnerable › Vulnerabilities

CVE-2006-3462

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2006-08-03 · updated 2026-06-16
• Weakness: CWE-119

Description

Heap-based buffer overflow in the NeXT RLE decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors involving decoding large RLE images.

Affected products

• libtiff: through 3.8.1

References

• http://docs.info.apple.com/article.html?artnum=304063
• http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html
• http://lwn.net/Alerts/194228/
• http://secunia.com/advisories/21253
• http://secunia.com/advisories/21274
• http://secunia.com/advisories/21290
• http://secunia.com/advisories/21304
• http://secunia.com/advisories/21319
• http://secunia.com/advisories/21334
• http://secunia.com/advisories/21338

Get alerted when CVE-2006-3462 or the next vulnerability affects your stack