CVE-2006-3465
Unspecified vulnerability in the custom tag support for the TIFF library (libtiff) before 3.8.2...
Unspecified vulnerability in the custom tag support for the TIFF library (libtiff) before 3.8.2 allows remote attackers to cause a denial of service (instability or crash) and execute arbitrary code via unknown vectors.
Exploit likelihood
What each source reports
NVD Score used
7.5
Unspecified vulnerability in the custom tag support for the TIFF library (libtiff) before 3.8.2 allows remote attackers to cause a denial of service (instability or crash) and execute arbitrary code via unknown vectors.
- Record
CVE-2006-3465- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the custom tag support for the TIFF library (libtiff) before 3.8.2 allows remote attackers to cause a denial of service (instability or crash) and execute arbitrary code via unknown vectors.
- Record
CVE-2006-3465- Updated
- 2026-11-02
EUVDEUVD-2006-3460 No score
Unspecified vulnerability in the custom tag support for the TIFF library (libtiff) before 3.8.2 allows remote attackers to cause a denial of service (instability or crash) and execute arbitrary code via unknown vectors.
- Record
EUVD-2006-3460- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f6j4-jjq3-5j5j No score
Unspecified vulnerability in the custom tag support for the TIFF library (libtiff) before 3.8.2...
Unspecified vulnerability in the custom tag support for the TIFF library (libtiff) before 3.8.2 allows remote attackers to cause a denial of service (instability or crash) and execute arbitrary code via unknown vectors.
- Record
GHSA-f6j4-jjq3-5j5j- Updated
- 2026-11-02
OSV No score
Unspecified vulnerability in the custom tag support for the TIFF library (libtiff) before 3.8.2 allows remote attackers to cause a denial of service (instability or crash) and execute arbitrary code via unknown vectors.
- Record
CVE-2006-3465- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-3465 No score
Unspecified vulnerability in the custom tag support for the TIFF library (libtiff) before 3.8.2 allows remote attackers to cause a denial of service (instability or crash) and execute arbitrary code via unknown vectors.
- Record
DEBIAN-CVE-2006-3465- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
tiffDebian:12 |
before 3.8.2-6 | 3.8.2-6 |
tiffDebian:13 |
before 3.8.2-6 | 3.8.2-6 |
tiffDebian:14 |
before 3.8.2-6 | 3.8.2-6 |
tiffDebian:3.1 From an advisory covering 7 CVEs |
before 3.7.2-7, plus listed versions 3.7.2-33.7.2-3sarge13.7.2-43.7.2-53.7.2-6 |
3.7.2-7 |
libtiffRed Hat:enterprise_linux:3::as From an advisory covering 8 CVEs |
before 0:3.5.7-25.el3.4 | 0:3.5.7-25.el3.4 |
libtiff-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 8 CVEs |
before 0:3.5.7-25.el3.4 | 0:3.5.7-25.el3.4 |
libtiff-develRed Hat:enterprise_linux:3::as From an advisory covering 8 CVEs |
before 0:3.5.7-25.el3.4 | 0:3.5.7-25.el3.4 |
libtiffRed Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs |
before 0:3.5.7-25.el3.4 | 0:3.5.7-25.el3.4 |
libtiff-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs |
before 0:3.5.7-25.el3.4 | 0:3.5.7-25.el3.4 |
libtiff-develRed Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs |
before 0:3.5.7-25.el3.4 | 0:3.5.7-25.el3.4 |
Show 30 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libtiffRed Hat:enterprise_linux:3::es From an advisory covering 8 CVEs |
before 0:3.5.7-25.el3.4 | 0:3.5.7-25.el3.4 |
libtiff-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 8 CVEs |
before 0:3.5.7-25.el3.4 | 0:3.5.7-25.el3.4 |
libtiff-develRed Hat:enterprise_linux:3::es From an advisory covering 8 CVEs |
before 0:3.5.7-25.el3.4 | 0:3.5.7-25.el3.4 |
libtiffRed Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs |
before 0:3.5.7-25.el3.4 | 0:3.5.7-25.el3.4 |
libtiff-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs |
before 0:3.5.7-25.el3.4 | 0:3.5.7-25.el3.4 |
libtiff-develRed Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs |
before 0:3.5.7-25.el3.4 | 0:3.5.7-25.el3.4 |
libtiffRed Hat:enterprise_linux:4::as From an advisory covering 8 CVEs |
before 0:3.6.1-12 | 0:3.6.1-12 |
libtiff-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 8 CVEs |
before 0:3.6.1-12 | 0:3.6.1-12 |
libtiff-develRed Hat:enterprise_linux:4::as From an advisory covering 8 CVEs |
before 0:3.6.1-12 | 0:3.6.1-12 |
libtiffRed Hat:enterprise_linux:4::desktop From an advisory covering 8 CVEs |
before 0:3.6.1-12 | 0:3.6.1-12 |
libtiff-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 8 CVEs |
before 0:3.6.1-12 | 0:3.6.1-12 |
libtiff-develRed Hat:enterprise_linux:4::desktop From an advisory covering 8 CVEs |
before 0:3.6.1-12 | 0:3.6.1-12 |
libtiffRed Hat:enterprise_linux:4::es From an advisory covering 8 CVEs |
before 0:3.6.1-12 | 0:3.6.1-12 |
libtiff-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 8 CVEs |
before 0:3.6.1-12 | 0:3.6.1-12 |
libtiff-develRed Hat:enterprise_linux:4::es From an advisory covering 8 CVEs |
before 0:3.6.1-12 | 0:3.6.1-12 |
libtiffRed Hat:enterprise_linux:4::ws From an advisory covering 8 CVEs |
before 0:3.6.1-12 | 0:3.6.1-12 |
libtiff-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 8 CVEs |
before 0:3.6.1-12 | 0:3.6.1-12 |
libtiff-develRed Hat:enterprise_linux:4::ws From an advisory covering 8 CVEs |
before 0:3.6.1-12 | 0:3.6.1-12 |
kdegraphicsRed Hat:enterprise_linux:3::as From an advisory covering 10 CVEs |
before 7:3.1.3-3.10 | 7:3.1.3-3.10 |
kdegraphics-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 10 CVEs |
before 7:3.1.3-3.10 | 7:3.1.3-3.10 |
kdegraphics-develRed Hat:enterprise_linux:3::as From an advisory covering 10 CVEs |
before 7:3.1.3-3.10 | 7:3.1.3-3.10 |
kdegraphicsRed Hat:enterprise_linux:3::desktop From an advisory covering 10 CVEs |
before 7:3.1.3-3.10 | 7:3.1.3-3.10 |
kdegraphics-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 10 CVEs |
before 7:3.1.3-3.10 | 7:3.1.3-3.10 |
kdegraphics-develRed Hat:enterprise_linux:3::desktop From an advisory covering 10 CVEs |
before 7:3.1.3-3.10 | 7:3.1.3-3.10 |
kdegraphicsRed Hat:enterprise_linux:3::es From an advisory covering 10 CVEs |
before 7:3.1.3-3.10 | 7:3.1.3-3.10 |
kdegraphics-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 10 CVEs |
before 7:3.1.3-3.10 | 7:3.1.3-3.10 |
kdegraphics-develRed Hat:enterprise_linux:3::es From an advisory covering 10 CVEs |
before 7:3.1.3-3.10 | 7:3.1.3-3.10 |
kdegraphicsRed Hat:enterprise_linux:3::ws From an advisory covering 10 CVEs |
before 7:3.1.3-3.10 | 7:3.1.3-3.10 |
kdegraphics-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 10 CVEs |
before 7:3.1.3-3.10 | 7:3.1.3-3.10 |
kdegraphics-develRed Hat:enterprise_linux:3::ws From an advisory covering 10 CVEs |
before 7:3.1.3-3.10 | 7:3.1.3-3.10 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-3465 is a high vulnerability (CVSS 7.5) in Libtiff, published August 2, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.77%, the 93rd percentile. Fixed in tiff 3.8.2-6.
References
lists.apple.com/archives/security-announce/2006//Aug/msg00000.html
secunia.com/advisories/21501
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9067
secunia.com/advisories/21537
secunia.com/advisories/21632
gentoo.org/security/en/glsa/glsa-200608-07.xml
Show 81 moreShow less
secunia.com/advisories/21338
ubuntu.com/usn/usn-330-1
support.avaya.com/elmodocs2/security/ASA-2006-166.htm
vupen.com/english/advisories/2006/3101
securitytracker.com/id?1016628
secunia.com/advisories/21253
debian.org/security/2006/dsa-1137
secunia.com/advisories/21370
securitytracker.com/id?1016671
secunia.com/advisories/21598
redhat.com/support/errata/RHSA-2006-0648.html
mandriva.com/security/advisories?name=MDKSA-2006:137
securityfocus.com/bid/19289
vupen.com/english/advisories/2007/4034
us-cert.gov/cas/techalerts/TA06-214A.html
novell.com/linux/security/advisories/2006_44_libtiff.html
secunia.com/advisories/21290
secunia.com/advisories/21274
vupen.com/english/advisories/2006/3105
osvdb.org/27729
redhat.com/support/errata/RHSA-2006-0603.html
secunia.com/advisories/21304
slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.536600
docs.info.apple.com/article.html?artnum=304063
issues.rpath.com/browse/RPL-558
secunia.com/advisories/27832
secunia.com/advisories/21346
sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1
securityfocus.com/bid/19287
secunia.com/advisories/21319
secunia.com/advisories/21392
secunia.com/advisories/21334
secunia.com/advisories/22036
lwn.net/Alerts/194228
sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1
nvd.nist.gov/vuln/detail/CVE-2006-3465
github.com/advisories/GHSA-f6j4-jjq3-5j5j
security-tracker.debian.org/tracker/CVE-2006-3465
access.redhat.com/errata/RHSA-2006:0603
redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=199111
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0603.json
access.redhat.com/security/cve/CVE-2006-2656
bugzilla.redhat.com/show_bug.cgi?id=193166
cve.org/CVERecord?id=CVE-2006-2656
nvd.nist.gov/vuln/detail/CVE-2006-2656
access.redhat.com/security/cve/CVE-2006-3459
cve.org/CVERecord?id=CVE-2006-3459
nvd.nist.gov/vuln/detail/CVE-2006-3459
access.redhat.com/security/cve/CVE-2006-3460
cve.org/CVERecord?id=CVE-2006-3460
nvd.nist.gov/vuln/detail/CVE-2006-3460
access.redhat.com/security/cve/CVE-2006-3461
cve.org/CVERecord?id=CVE-2006-3461
nvd.nist.gov/vuln/detail/CVE-2006-3461
access.redhat.com/security/cve/CVE-2006-3462
cve.org/CVERecord?id=CVE-2006-3462
nvd.nist.gov/vuln/detail/CVE-2006-3462
access.redhat.com/security/cve/CVE-2006-3463
cve.org/CVERecord?id=CVE-2006-3463
nvd.nist.gov/vuln/detail/CVE-2006-3463
access.redhat.com/security/cve/CVE-2006-3464
cve.org/CVERecord?id=CVE-2006-3464
nvd.nist.gov/vuln/detail/CVE-2006-3464
access.redhat.com/security/cve/CVE-2006-3465
cve.org/CVERecord?id=CVE-2006-3465
access.redhat.com/errata/RHSA-2006:0648
bugzilla.redhat.com/show_bug.cgi?id=201313
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0648.json
access.redhat.com/security/cve/CVE-2006-2024
bugzilla.redhat.com/show_bug.cgi?id=1618083
cve.org/CVERecord?id=CVE-2006-2024
nvd.nist.gov/vuln/detail/CVE-2006-2024
access.redhat.com/security/cve/CVE-2006-2025
bugzilla.redhat.com/show_bug.cgi?id=1618084
cve.org/CVERecord?id=CVE-2006-2025
nvd.nist.gov/vuln/detail/CVE-2006-2025
access.redhat.com/security/cve/CVE-2006-2026
bugzilla.redhat.com/show_bug.cgi?id=1618085
cve.org/CVERecord?id=CVE-2006-2026
nvd.nist.gov/vuln/detail/CVE-2006-2026