CVE-2006-3461: libtiff

EPSS trend

Probability

5.32%

Chance of exploitation in the next 30 days

Percentile

93%

Versus all other CVEs

30-day change

0.00 pp

From 5.32% on 20-09-2026

20-09-202620-10-2026

EPSS score

5.32%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

44 links

www.osvdb.org/27725VDB EntryX Refsource OSVDB
lists.apple.com/archives/security-announce/2006//Aug/msg00000.htmlVendor AdvisoryX Refsource APPLE
www.vupen.com/english/advisories/2007/3486VDB EntryX Refsource VUPEN
secunia.com/advisories/21501Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/bid/19290VDB EntryX Refsource BID
secunia.com/advisories/21537Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/21632Third Party AdvisoryX Refsource SECUNIA
www.gentoo.org/security/en/glsa/glsa-200608-07.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/21338Third Party AdvisoryX Refsource SECUNIA
www.ubuntu.com/usn/usn-330-1Vendor AdvisoryX Refsource UBUNTU

Show all 44 references

support.avaya.com/elmodocs2/security/ASA-2006-166.htmX Refsource CONFIRM
www.vupen.com/english/advisories/2006/3101VDB EntryX Refsource VUPEN
securitytracker.com/id?1016628VDB EntryX Refsource SECTRACK
secunia.com/advisories/21253Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2006/dsa-1137Vendor AdvisoryX Refsource DEBIANPatch
secunia.com/advisories/21370Third Party AdvisoryX Refsource SECUNIA
securitytracker.com/id?1016671VDB EntryX Refsource SECTRACK
secunia.com/advisories/21598Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2006-0648.htmlVendor AdvisoryX Refsource REDHAT
www.mandriva.com/security/advisories?name=MDKSA-2006:137Vendor AdvisoryX Refsource MANDRIVA
www.securityfocus.com/bid/19289VDB EntryX Refsource BID
secunia.com/advisories/27222Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2007/4034VDB EntryX Refsource VUPEN
www.us-cert.gov/cas/techalerts/TA06-214A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
www.novell.com/linux/security/advisories/2006_44_libtiff.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/21290Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/21274Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2006/3105VDB EntryX Refsource VUPEN
secunia.com/advisories/27181Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2006-0603.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/21304Third Party AdvisoryX Refsource SECUNIA
slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.536600Vendor AdvisoryX Refsource SLACKWARE
issues.rpath.com/browse/RPL-558X Refsource CONFIRM
secunia.com/advisories/27832Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/21346Third Party AdvisoryX Refsource SECUNIA
sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1Vendor AdvisoryX Refsource SUNALERT
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9910VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/21319Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/21392Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/21334Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/22036Third Party AdvisoryX Refsource SECUNIA
lwn.net/Alerts/194228/Vendor AdvisoryX Refsource TRUSTIX
sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1Vendor AdvisoryX Refsource SUNALERT
security-tracker.debian.org/tracker/CVE-2006-3461Advisory

Related vulnerabilities

CVE-2018-5360debiantiff+31.82%8y ago14-01-2018 02:00LibTIFF before 4.0.6 mishandles the reading of TIFF files, as demonstrated by a heap-based buffer over-read in the ReadTIFFImage function in coders/tiff.c in GraphicsMagick 1.3.27.CVE-2018-10963alpinetiff+53.64%8y ago10-05-2018 02:00The TIFFWriteDirectorySec() function in tif_dirwrite.c in LibTIFF through 4.0.9 allows remote attackers to cause a denial of service (assertion failure and application crash) via a crafted file, a different vulnerability than CVE-2017-13726.CVE-2013-4231debiantiff+27.40%12y ago19-01-2014 15:00Multiple buffer overflows in libtiff before 4.0.3 allow remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1) extension block in a GIF image or (2) GIF raster image to tools/gif2tiff.c or (3) a long filename for a TIFF image to tools/rgb2ycbcr.c. NOTE: vectors 1 and 3 are disputed by Red Hat, which states that the input cannot exceed the allocated buffer size.CVE-2013-4243debiantiff+57.17%13y ago10-09-2013 19:00Heap-based buffer overflow in the readgifimage function in the gif2tiff tool in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted height and width values in a GIF image.CVE-2013-4232debiantiff+35.02%13y ago10-09-2013 19:00Use-after-free vulnerability in the t2p_readwrite_pdf_image function in tools/tiff2pdf.c in libtiff 4.0.3 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted TIFF image.CVE-2013-4244debiantiff+42.70%13y ago28-09-2013 19:00The LZW decompressor in the gif2tiff tool in libtiff 4.0.3 and earlier allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a crafted GIF image.

All vulnerabilities inlibtiff

CVE-2006-3461: libtiff

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References