CVE-2006-2193

CVE-2006-2193

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

Buffer overflow in the t2p_write_pdf_string function in tiff2pdf in libtiff 3.8.2 and earlier allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a TIFF file with a DocumentName tag that contains UTF-8 characters, which triggers the overflow when a character is sign extended to an integer that produces more digits than expected in an sprintf call.

EPSS 5.4% · Fix available

Published

2006-06-08T19:00:00.000Z

Updated

2024-08-07T17:43:27.935Z

Stack: system

Check your server →