CVE-2006-3460

CVE-2006-3460 describes a heap-based buffer overflow in the JPEG decoder within the libtiff library, affecting versions prior to 3.8.2. This vulnerability allows unauthenticated, remote attackers to trigger a denial of service and potentially execute arbitrary code by supplying a malformed JPEG stream. With a CVSS score of 7.5, it is considered high severity due to its network-based attack vector and low complexity, leading to potential compromise of confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage.