Published: 27/01/2005 Updated: 11/10/2017

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Multiple integer overflows in libtiff 3.6.1 and previous versions allow remote malicious users to cause a denial of service (crash or memory corruption) via TIFF images that lead to incorrect malloc calls.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libtiff libtiff 3.5.1
libtiff libtiff 3.5.2
pdflib pdf library 5.0.2
wxgtk2 wxgtk2
libtiff libtiff 3.5.3
libtiff libtiff 3.5.4
wxgtk2 wxgtk2 2.5_.0
libtiff libtiff 3.5.5
libtiff libtiff 3.5.7
libtiff libtiff 3.4
libtiff libtiff 3.6.0
libtiff libtiff 3.6.1
apple mac os x 10.2.4
apple mac os x 10.2.5
apple mac os x 10.3.4
apple mac os x 10.3.5
apple mac os x server 10.2.5
apple mac os x server 10.2.6
apple mac os x server 10.3.4
apple mac os x server 10.3.5
mandrakesoft mandrake linux 10.0
redhat enterprise linux 3.0
suse suse linux 8.1
suse suse linux 8.2
apple mac os x 10.2.6
apple mac os x 10.2.7
apple mac os x 10.3.6
apple mac os x server 10.2
apple mac os x server 10.2.7
apple mac os x server 10.2.8
apple mac os x server 10.3.6
kde kde 3.2
redhat enterprise linux 2.1
redhat enterprise linux desktop 3.0
suse suse linux 8
suse suse linux 9.0
apple mac os x 10.2
apple mac os x 10.2.1
apple mac os x 10.2.8
apple mac os x 10.3
apple mac os x 10.3.1
apple mac os x server 10.2.1
apple mac os x server 10.2.2
apple mac os x server 10.3
apple mac os x server 10.3.1
kde kde 3.2.1
kde kde 3.2.2
kde kde 3.2.3
redhat fedora core core_2.0
redhat linux advanced workstation 2.1
suse suse linux 9.1
trustix secure linux 1.5
apple mac os x 10.2.2
apple mac os x 10.2.3
apple mac os x 10.3.2
apple mac os x 10.3.3
apple mac os x server 10.2.3
apple mac os x server 10.2.4
apple mac os x server 10.3.2
apple mac os x server 10.3.3
kde kde 3.3
kde kde 3.3.1
suse suse linux 1.0
trustix secure linux 2.0
trustix secure linux 2.1

Synopsis kdegraphics security update Type/Severity Security Advisory: Moderate Topic Updated kdegraphics packages that resolve multiple security issues in kfaxare now availableThis update has been rated as having moderate security impact by the RedHat Security Response Team Description The ...

Synopsis libtiff security update Type/Severity Security Advisory: Important Topic Updated libtiff packages that fix various buffer and integer overflows arenow available Description The libtiff package contains a library of functions for manipulating TIFF(Tagged Image File Format) image fo ...

Synopsis tetex security update Type/Severity Security Advisory: Moderate Topic Updated tetex packages that fix several integer overflows are now availableThis update has been rated as having moderate security impact by the RedHat Security Response Team Description TeTeX is an implementati ...

Several problems have been discovered in libtiff, the Tag Image File Format library for processing TIFF graphics files An attacker could prepare a specially crafted TIFF graphic that would cause the client to execute arbitrary code or crash The Common Vulnerabilities and Exposures Project has identified the following problems: CAN-2004-0803 ...

NVD-CWE-Other http://www.redhat.com/support/errata/RHSA-2004-577.html http://www.securityfocus.com/bid/11406 http://www.kde.org/info/security/advisory-20041209-2.txt http://www.debian.org/security/2004/dsa-567 http://www.redhat.com/support/errata/RHSA-2005-354.html http://www.novell.com/linux/security/advisories/2004_38_libtiff.html http://www.trustix.org/errata/2004/0054/http://www.kb.cert.org/vuls/id/687568 http://www.ciac.org/ciac/bulletins/p-015.shtml http://secunia.com/advisories/12818 http://securitytracker.com/id?1011674 http://www.redhat.com/support/errata/RHSA-2005-021.html http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000888 http://sunsolve.sun.com/search/document.do?assetkey=1-26-101677-1 http://www.mandriva.com/security/advisories?name=MDKSA-2004:109 http://www.mandriva.com/security/advisories?name=MDKSA-2005:052 http://sunsolve.sun.com/search/document.do?assetkey=1-66-201072-1 http://marc.info/?l=bugtraq&m=109779465621929&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/17715 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9907 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100116 https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2005:021 https://www.kb.cert.org/vuls/id/687568

CVE-2004-0886

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect