CVE-2004-1307

Fixed in a distro release EPSS 6%

Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overflow.

Published 2005-05-04 · CVE record · OSV

Products: avaya call_management_system_server, avaya cvlan, avaya integrated_management, avaya interactive_response, avaya intuity_audix_lx, f5 icontrol_service_manager, libtiff, sgi propack, conectiva linux, avaya mn100, apple mac_os_x, apple mac_os_x_server, avaya modular_messaging_message_storage_server, gentoo linux, mandrakesoft mandrake_linux, mandrakesoft mandrake_linux_corporate_server, sco unixware, sun solaris, sunos

Distro releases