Intrusion PreventionLibTIFF.TIFFFetchShortPair.tdir_count.Buffer.Overflow
Description
The Iphone MobileSafari embedded web browser is vulnerable to a buffer overflow when parsing specially crafted TIFF image files. An attacker can exploit this issue to execute arbitrary commands on a remote system.
Affected Products
Apple iPhone 1.0
Apple iPhone 1.0.1
Apple iPhone 1.0.2
Apple iPhone 1.1.1
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Upgrade to Apple iPhone 1.1.2
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2020-10-22 | 16.948 | Name:iPhone. MobileSafari. LibTIFF. Buffer. Overflow:LibTIFF. TIFFFetchShortPair. tdir_count. Buffer. Overflow |
| ID | 15077 |
| Created | Oct 30, 2007 |
| Updated | Mar 20, 2023 |
| Risk |
|
| CVE ID | CVE-2006-3459 |
| Exploit Prediction Score | 14.14% |
| Default Action | drop |
| Active | |
| Affected OS | MacOS |
| Affected App | Apple |