Denial of Service Vulnerability in TIFFFetchAnyArray Function in Apple OS X 10.4.7 and Earlier

Denial of Service Vulnerability in TIFFFetchAnyArray Function in Apple OS X 10.4.7 and Earlier

CVE-2006-3356 · LOW Severity

AV:N/AC:H/AU:N/C:N/I:N/A:P

The TIFFFetchAnyArray function in ImageIO in Apple OS X 10.4.7 and earlier allows remote user-assisted attackers to cause a denial of service (application crash) via an invalid tag value in a TIFF image, possibly triggering a null dereference. NOTE: This is a different issue than CVE-2006-1469.

Learn more about our User Device Pen Test.