CVE-2004-1183
Fixed in a distro release EPSS 4%
Integer overflow in the tiffdump utility for libtiff 3.7.1 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted TIFF file.
Products: libtiff
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | tiff | 3.6.1-5 |
| Debian 13 | tiff | 3.6.1-5 |
| Debian 14 | tiff | 3.6.1-5 |
| Debian 3.0 | tiff | 3.5.5-6.woody5 |
| Red Hat Enterprise Linux 3 | libtiff | 0:3.5.7-22.el3 |
| Red Hat Enterprise Linux 3 | libtiff-debuginfo | 0:3.5.7-22.el3 |
| Red Hat Enterprise Linux 3 | libtiff-devel | 0:3.5.7-22.el3 |
| Red Hat Enterprise Linux 4 | libtiff | 0:3.6.1-8 |
| Red Hat Enterprise Linux 4 | libtiff-debuginfo | 0:3.6.1-8 |
| Red Hat Enterprise Linux 4 | libtiff-devel | 0:3.6.1-8 |