CVEvulnerability

CVE-2004-0886

5.0 MEDIUM Published 2005-01-27 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-01-27
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

Multiple integer overflows in libtiff 3.6.1 and earlier allow remote attackers to cause a denial of service (crash or memory corruption) via TIFF images that lead to incorrect malloc calls.

Affected configurations

• libtiff libtiff 3.4 • libtiff libtiff 3.5.1 • libtiff libtiff 3.5.2 • libtiff libtiff 3.5.3 • libtiff libtiff 3.5.4 • libtiff libtiff 3.5.5 • libtiff libtiff 3.5.7 • libtiff libtiff 3.6.0 • libtiff libtiff 3.6.1 • pdflib pdf library 5.0.2 • wxgtk2 wxgtk2 • wxgtk2 wxgtk2 2.5 .0 • apple mac os x 10.2 • apple mac os x 10.2.1 • apple mac os x 10.2.2 • apple mac os x 10.2.3 • apple mac os x 10.2.4 • apple mac os x 10.2.5 • apple mac os x 10.2.6 • apple mac os x 10.2.7 • apple mac os x 10.2.8 • apple mac os x 10.3 • apple mac os x 10.3.1 • apple mac os x 10.3.2 • apple mac os x 10.3.3 • apple mac os x 10.3.4 • apple mac os x 10.3.5 • apple mac os x 10.3.6 • apple mac os x server 10.2 • apple mac os x server 10.2.1 • apple mac os x server 10.2.2 • apple mac os x server 10.2.3 • apple mac os x server 10.2.4 • apple mac os x server 10.2.5 • apple mac os x server 10.2.6 • apple mac os x server 10.2.7 • apple mac os x server 10.2.8 • apple mac os x server 10.3 • apple mac os x server 10.3.1 • apple mac os x server 10.3.2 • apple mac os x server 10.3.3 • apple mac os x server 10.3.4 • apple mac os x server 10.3.5 • apple mac os x server 10.3.6 • kde kde 3.2 • kde kde 3.2.1 • kde kde 3.2.2 • kde kde 3.2.3 • kde kde 3.3 • kde kde 3.3.1 • mandrakesoft mandrake linux 10.0 • redhat enterprise linux 2.1 • redhat enterprise linux 3.0 • redhat enterprise linux desktop 3.0 • redhat fedora core core 2.0 • redhat linux advanced workstation 2.1 • suse suse linux 1.0 • suse suse linux 8 • suse suse linux 8.1 • suse suse linux 8.2 … and 5 more

References