CVE-2006-2120 PUBLISHED CVSS 2.0999999046325684 LOW

The TIFFToRGB function in libtiff before 3.8.1 allows remote attackers to cause a denial of service (crash) via a crafted TIFF image with Yr/Yg/Yb values that exceed the YCR/YCG/YCB values, which triggers an out-of-bounds read.

EPSS 0.32% · 54.9th percentile

Risk Scores

CVSS v2.0
2.0999999046325684
EPSS Score
0.32%
54.9th percentile

Affected Products

VendorProductVersions
n/an/a*
libtifflibtiff3.8.1

Timeline

References

Open in Interactive Console →