What’s Vulnerable › Vulnerabilities

CVE-2006-3463

• Severity: high (CVSS 7.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2006-08-03 · updated 2026-06-16
• Weakness: CWE-119

Description

The EstimateStripByteCounts function in TIFF library (libtiff) before 3.8.2 uses a 16-bit unsigned short when iterating over an unsigned 32-bit value, which allows context-dependent attackers to cause a denial of service via a large td_nstrips value, which triggers an infinite loop.

Affected products

• libtiff: through 3.8.1

References

• http://lwn.net/Alerts/194228/
• http://secunia.com/advisories/21274
• http://secunia.com/advisories/21290
• http://secunia.com/advisories/21304
• http://secunia.com/advisories/21319
• http://secunia.com/advisories/21334
• http://secunia.com/advisories/21338
• http://secunia.com/advisories/21346
• http://secunia.com/advisories/21370
• http://secunia.com/advisories/21392

Get alerted when CVE-2006-3463 or the next vulnerability affects your stack