CVEvulnerability

CVE-2004-1307

7.5 HIGH Published 2004-12-21 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-12-21
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overflow.

Affected configurations

• avaya call management system server 8.0 • avaya call management system server 9.0 • avaya call management system server 11.0 • avaya call management system server 12.0 • avaya call management system server 13.0 • avaya cvlan • avaya integrated management • avaya interactive response • avaya interactive response 1.2.1 • avaya interactive response 1.3 • avaya intuity audix lx • f5 icontrol service manager 1.3 • f5 icontrol service manager 1.3.4 • f5 icontrol service manager 1.3.5 • f5 icontrol service manager 1.3.6 • libtiff libtiff 3.4 • libtiff libtiff 3.5.1 • libtiff libtiff 3.5.2 • libtiff libtiff 3.5.3 • libtiff libtiff 3.5.4 • libtiff libtiff 3.5.5 • libtiff libtiff 3.5.7 • libtiff libtiff 3.6.0 • libtiff libtiff 3.6.1 • libtiff libtiff 3.7.0 • sgi propack 3.0 • conectiva linux 9.0 • conectiva linux 10.0 • avaya mn100 • apple mac os x 10.3 • apple mac os x 10.3.1 • apple mac os x 10.3.2 • apple mac os x 10.3.3 • apple mac os x 10.3.4 • apple mac os x 10.3.5 • apple mac os x 10.3.6 • apple mac os x 10.3.7 • apple mac os x 10.3.8 • apple mac os x 10.3.9 • apple mac os x server 10.3 • apple mac os x server 10.3.1 • apple mac os x server 10.3.2 • apple mac os x server 10.3.3 • apple mac os x server 10.3.4 • apple mac os x server 10.3.5 • apple mac os x server 10.3.6 • apple mac os x server 10.3.7 • apple mac os x server 10.3.8 • apple mac os x server 10.3.9 • avaya modular messaging message storage server 1.1 • avaya modular messaging message storage server 2.0 • gentoo linux • mandrakesoft mandrake linux 10.0 • mandrakesoft mandrake linux 10.1 • mandrakesoft mandrake linux corporate server 3.0 • sco unixware 7.1.4 • sun solaris 7.0 • sun solaris 8.0 • sun solaris 9.0 • sun solaris 10.0 … and 2 more

References