PublicDate: 2006-04-25 23:02:00 UTC Candidate: CVE-2006-2025 References: https://ubuntu.com/security/notices/USN-277-1 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2025 Description: Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted TIFF image. Ubuntu-Description: Notes: Priority: untriaged Discovered-by: Assigned-to: CVSS: Bugs: dapper_tiff: released (3.7.4-1ubuntu3.2) edgy_tiff: not-affected feisty_tiff: not-affected upstream_tiff: needs-triage