CVE-2006-2120
Fixed in a distro release EPSS <1%
The TIFFToRGB function in libtiff before 3.8.1 allows remote attackers to cause a denial of service (crash) via a crafted TIFF image with Yr/Yg/Yb values that exceed the YCR/YCG/YCB values, which triggers an out-of-bounds read.
Products: libtiff
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | tiff | 3.8.1 |
| Debian 13 | tiff | 3.8.1 |
| Debian 14 | tiff | 3.8.1 |
| Debian 3.1 | tiff | 3.7.2-4 |
| Red Hat Enterprise Linux 3 | libtiff | 0:3.5.7-25.el3.1 |
| Red Hat Enterprise Linux 3 | libtiff-debuginfo | 0:3.5.7-25.el3.1 |
| Red Hat Enterprise Linux 3 | libtiff-devel | 0:3.5.7-25.el3.1 |
| Red Hat Enterprise Linux 4 | libtiff | 0:3.6.1-10 |
| Red Hat Enterprise Linux 4 | libtiff-debuginfo | 0:3.6.1-10 |
| Red Hat Enterprise Linux 4 | libtiff-devel | 0:3.6.1-10 |