← Vulnerability feed

Vulnerability record · CVE-2006-2024 · published 25 April 2006

CVE-2006-2024: Libtiff vulnerability

Libtiff · Libtiff

Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a TIFF image that triggers errors in (1) the TIFFFetchAnyArray function in (a) tif_dirread.c; (2) certain "codec cleanup methods" in (b) tif_lzw.c, (c) tif_pixarlog.c, and (d) tif_zip.c; (3) and improper restoration of setfield and getfield methods in cleanup functions within (e) tif_jpeg.c, tif_pixarlog.c, (f) tif_fax3.c, and tif_zip.c.

4.0 CVSS 2.0 Medium EPSS 8.6% · top 5.1%
4.0CVSS 2.0 base score
8.6%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
56References, 2 tagged exploit
16 Jun 2026Last modified by NVD

Description

Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a TIFF image that triggers errors in (1) the TIFFFetchAnyArray function in (a) tif_dirread.c; (2) certain "codec cleanup methods" in (b) tif_lzw.c, (c) tif_pixarlog.c, and (d) tif_zip.c; (3) and improper restoration of setfield and getfield methods in cleanup functions within (e) tif_jpeg.c, tif_pixarlog.c, (f) tif_fax3.c, and tif_zip.c.

AV:N/AC:L/Au:S/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc
http://bugzilla.remotesensing.org/show_bug.cgi?id=1102 Exploit
http://secunia.com/advisories/19838
http://secunia.com/advisories/19851
http://secunia.com/advisories/19897
http://secunia.com/advisories/19936
http://secunia.com/advisories/19949
http://secunia.com/advisories/19964
http://secunia.com/advisories/20021
http://secunia.com/advisories/20023
http://secunia.com/advisories/20210
http://secunia.com/advisories/20345
http://secunia.com/advisories/20667
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103099-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201332-1
http://support.avaya.com/elmodocs2/security/ASA-2006-119.htm
http://www.debian.org/security/2006/dsa-1054
http://www.gentoo.org/security/en/glsa/glsa-200605-17.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2006:082
http://www.novell.com/linux/security/advisories/2006_04_28.html
http://www.redhat.com/support/errata/RHSA-2006-0425.html
http://www.securityfocus.com/bid/17730
http://www.trustix.org/errata/2006/0024
http://www.vupen.com/english/advisories/2006/1563
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189933 Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/26133
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9893
https://usn.ubuntu.com/277-1/
ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc
http://bugzilla.remotesensing.org/show_bug.cgi?id=1102 Exploit
http://secunia.com/advisories/19838
http://secunia.com/advisories/19851
http://secunia.com/advisories/19897
http://secunia.com/advisories/19936
http://secunia.com/advisories/19949
http://secunia.com/advisories/19964
http://secunia.com/advisories/20021
http://secunia.com/advisories/20023
http://secunia.com/advisories/20210
http://secunia.com/advisories/20345

Track CVE-2006-2024 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2004-0929Libtiff vulnerabilityHeap-based buffer overflow in the OJPEGVSetField function in tif_ojpeg.c for libtiff 3.6.1 and earlier, when compiled with the OJPEG_SUPPORT (old JPE…EPSS 8.2%10.0CVE-2004-1308Libtiff vulnerabilityInteger overflow in (1) tif_dirread.c and (2) tif_fax3.c for libtiff 3.5.7 and 3.7.0 allows remote attackers to execute arbitrary code via a TIFF fil…EPSS 15%9.8CVE-2016-9540Libtiff memory buffer overflow vulnerabilitytools/tiffcp.c in libtiff 4.0.6 has an out-of-bounds write on tiled images with odd tile width versus image width. Reported as MSVR 35103, aka "cpStr…EPSS 3.6%9.8CVE-2016-9539Libtiff memory buffer overflow vulnerabilitytools/tiffcrop.c in libtiff 4.0.6 has an out-of-bounds read in readContigTilesIntoBuffer(). Reported as MSVR 35092.EPSS 3.0%9.8CVE-2016-9538Libtiff integer overflow vulnerabilitytools/tiffcrop.c in libtiff 4.0.6 reads an undefined buffer in readContigStripsIntoBuffer() because of a uint16 integer overflow. Reported as MSVR 35…EPSS 3.4%9.8CVE-2016-9537Libtiff memory buffer overflow vulnerabilitytools/tiffcrop.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in buffers. Reported as MSVR 35093, MSVR 35096, and MSVR 35097.EPSS 3.1%9.8CVE-2016-9536Libtiff memory buffer overflow vulnerabilitytools/tiff2pdf.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers in t2p_process_jpeg_strip(). Reported as MSVR 350…EPSS 3.1%9.8CVE-2016-9535Libtiff memory buffer overflow vulnerabilitytif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mo…EPSS 4.8%

Source: NIST National Vulnerability Database (record CVE-2006-2024), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.