CVE-2004-0803
Fixed in a distro release EPSS 8%
Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.
Products: libtiff, pdflib pdf_library, wxgtk2, apple mac_os_x, apple mac_os_x_server, kde, mandrakesoft mandrake_linux, redhat enterprise_linux, redhat enterprise_linux_desktop, redhat fedora_core, redhat linux_advanced_workstation, suse_linux, trustix secure_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | tiff | 3.6.1-2 |
| Debian 13 | tiff | 3.6.1-2 |
| Debian 14 | tiff | 3.6.1-2 |
| Debian 3.0 | tiff | 3.5.5-6woody1 |
| Red Hat Enterprise Linux 3 | kdegraphics | 7:3.1.3-3.7 |
| Red Hat Enterprise Linux 3 | kdegraphics-debuginfo | 7:3.1.3-3.7 |
| Red Hat Enterprise Linux 3 | kdegraphics-devel | 7:3.1.3-3.7 |
| Red Hat Enterprise Linux 3 | libtiff | 0:3.5.7-20.1 |
| Red Hat Enterprise Linux 3 | libtiff-debuginfo | 0:3.5.7-20.1 |
| Red Hat Enterprise Linux 3 | libtiff-devel | 0:3.5.7-20.1 |
| Red Hat Enterprise Linux 3 | tetex | 0:1.0.7-67.7 |
| Red Hat Enterprise Linux 3 | tetex-afm | 0:1.0.7-67.7 |
| Red Hat Enterprise Linux 3 | tetex-debuginfo | 0:1.0.7-67.7 |
| Red Hat Enterprise Linux 3 | tetex-dvips | 0:1.0.7-67.7 |
| Red Hat Enterprise Linux 3 | tetex-fonts | 0:1.0.7-67.7 |
| Red Hat Enterprise Linux 3 | tetex-latex | 0:1.0.7-67.7 |
| Red Hat Enterprise Linux 3 | tetex-xdvi | 0:1.0.7-67.7 |