Exploit for #VU31846 Stack-based buffer overflow in LibTIFF

Vulnerability identifier: #VU31846

Vulnerability risk: Medium

CVSSv4.0: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:A/U:Green]

CVE-ID: CVE-2006-3459

CWE-ID: CWE-121

Exploitation vector: Network

Exploits in database: 5

• July 25, 2020
  • iPhone MobileMail - LibTIFF Buffer Overflow (Metasploit) [Exploit-DB]
  • Apple iPhone MobileSafari LibTIFF - 'email' Buffer Overflow (Metasploit) (2) [Exploit-DB]
  • Apple iPhone MobileSafari LibTIFF - 'browser' Buffer Overflow (Metasploit) (1) [Exploit-DB]
  • Apple iOS MobileMail LibTIFF Buffer Overflow [Metasploit]
  • Apple iOS MobileSafari LibTIFF Buffer Overflow [Metasploit]

Vulnerable software:
LibTIFF
Universal components / Libraries / Libraries used by multiple products

Vendor: LibTIFF