CVE-2004-0886
Fixed in a distro release EPSS 5%
Multiple integer overflows in libtiff 3.6.1 and earlier allow remote attackers to cause a denial of service (crash or memory corruption) via TIFF images that lead to incorrect malloc calls.
Products: libtiff, pdflib pdf_library, wxgtk2, apple mac_os_x, apple mac_os_x_server, kde, mandrakesoft mandrake_linux, redhat enterprise_linux, redhat enterprise_linux_desktop, redhat fedora_core, redhat linux_advanced_workstation, suse_linux, trustix secure_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | tiff | 3.6.1-2 |
| Debian 13 | tiff | 3.6.1-2 |
| Debian 14 | tiff | 3.6.1-2 |
| Debian 3.0 | tiff | 3.5.5-6woody1 |
| Red Hat Enterprise Linux 3 | kdegraphics | 7:3.1.3-3.7 |
| Red Hat Enterprise Linux 3 | kdegraphics-debuginfo | 7:3.1.3-3.7 |
| Red Hat Enterprise Linux 3 | kdegraphics-devel | 7:3.1.3-3.7 |
| Red Hat Enterprise Linux 3 | libtiff | 0:3.5.7-20.1 |
| Red Hat Enterprise Linux 3 | libtiff-debuginfo | 0:3.5.7-20.1 |
| Red Hat Enterprise Linux 3 | libtiff-devel | 0:3.5.7-20.1 |
| Red Hat Enterprise Linux 3 | tetex | 0:1.0.7-67.7 |
| Red Hat Enterprise Linux 3 | tetex-afm | 0:1.0.7-67.7 |
| Red Hat Enterprise Linux 3 | tetex-debuginfo | 0:1.0.7-67.7 |
| Red Hat Enterprise Linux 3 | tetex-dvips | 0:1.0.7-67.7 |
| Red Hat Enterprise Linux 3 | tetex-fonts | 0:1.0.7-67.7 |
| Red Hat Enterprise Linux 3 | tetex-latex | 0:1.0.7-67.7 |
| Red Hat Enterprise Linux 3 | tetex-xdvi | 0:1.0.7-67.7 |