CVEvulnerability

CVE-2004-0803

7.5 HIGH Published 2004-12-23 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-12-23
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.

Affected configurations

• libtiff libtiff 3.4 • libtiff libtiff 3.5.1 • libtiff libtiff 3.5.2 • libtiff libtiff 3.5.3 • libtiff libtiff 3.5.4 • libtiff libtiff 3.5.5 • libtiff libtiff 3.5.7 • libtiff libtiff 3.6.0 • libtiff libtiff 3.6.1 • pdflib pdf library 5.0.2 • wxgtk2 wxgtk2 2.5 .0 • apple mac os x 10.2 • apple mac os x 10.2.1 • apple mac os x 10.2.2 • apple mac os x 10.2.3 • apple mac os x 10.2.4 • apple mac os x 10.2.5 • apple mac os x 10.2.6 • apple mac os x 10.2.7 • apple mac os x 10.2.8 • apple mac os x 10.3 • apple mac os x 10.3.1 • apple mac os x 10.3.2 • apple mac os x 10.3.3 • apple mac os x 10.3.4 • apple mac os x 10.3.5 • apple mac os x 10.3.6 • apple mac os x server 10.2 • apple mac os x server 10.2.1 • apple mac os x server 10.2.2 • apple mac os x server 10.2.3 • apple mac os x server 10.2.4 • apple mac os x server 10.2.5 • apple mac os x server 10.2.6 • apple mac os x server 10.2.7 • apple mac os x server 10.2.8 • apple mac os x server 10.3 • apple mac os x server 10.3.1 • apple mac os x server 10.3.2 • apple mac os x server 10.3.3 • apple mac os x server 10.3.4 • apple mac os x server 10.3.5 • apple mac os x server 10.3.6 • kde kde 3.2 • kde kde 3.2.1 • kde kde 3.2.2 • kde kde 3.2.3 • kde kde 3.3 • kde kde 3.3.1 • mandrakesoft mandrake linux 10.0 • redhat enterprise linux 2.1 • redhat enterprise linux 3.0 • redhat enterprise linux desktop 3.0 • redhat fedora core core 2.0 • redhat linux advanced workstation 2.1 • suse suse linux 1.0 • suse suse linux 8 • suse suse linux 8.1 • suse suse linux 8.2 • suse suse linux 9.0 … and 4 more

References