CVE-2004-1183

Published: Jan 6, 2005Modified: Apr 16, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

Integer overflow in the tiffdump utility for libtiff 3.7.1 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted TIFF file.

Affected (12)

Products: Libtiff: Libtiff

1 product

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Libtiff Libtiff	Version 3.4
Libtiff Libtiff	Version 3.5.1
Libtiff Libtiff	Version 3.5.2
Libtiff Libtiff	Version 3.5.3
Libtiff Libtiff	Version 3.5.4
Libtiff Libtiff	Version 3.5.5
Libtiff Libtiff	Version 3.5.6
Libtiff Libtiff	Version 3.5.7
Libtiff Libtiff	Version 3.6.0
Libtiff Libtiff	Version 3.6.1
Libtiff Libtiff	Version 3.7.0
Libtiff Libtiff	Version 3.7.1

References (30)

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000920

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=110503635113419&w=2

Source: cve@mitre.org

http://secunia.com/advisories/13728/

Source: cve@mitre.org

http://secunia.com/advisories/13776

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200501-06.xml

Source: cve@mitre.org

Patch

http://www.debian.org/security/2004/dsa-626

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2005:001

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2005:002

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2005:052

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2005_01_libtiff_tiff.html

Source: cve@mitre.org

Patch

http://www.redhat.com/support/errata/RHSA-2005-019.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2005-035.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/12173

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/18782

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9743

Source: cve@mitre.org

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000920

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=110503635113419&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/13728/

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/13776

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200501-06.xml

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.debian.org/security/2004/dsa-626

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2005:001

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2005:002

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2005:052

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2005_01_libtiff_tiff.html

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.redhat.com/support/errata/RHSA-2005-019.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2005-035.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/12173

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/18782

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9743

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.