p PatchFirst

CVE-2006-2656

CVE-2006-2656

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Stack-based buffer overflow in the tiffsplit command in libtiff 3.8.2 and earlier might might allow attackers to execute arbitrary code via a long filename. NOTE: tiffsplit is not setuid. If there is not a common scenario under which tiffsplit is called with attacker-controlled command line arguments, then perhaps this issue should not be included in CVE.

EPSS 14.4% · Public exploit · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • tiff Debian:12

    Affected ranges
    • ECOSYSTEM: < 3.8.2-3

    Update to 3.8.2-3

  • tiff Debian:13

    Affected ranges
    • ECOSYSTEM: < 3.8.2-3

    Update to 3.8.2-3

  • tiff Debian:14

    Affected ranges
    • ECOSYSTEM: < 3.8.2-3

    Update to 3.8.2-3

Original sources

Check your server →