5.1
CVSSv2

CVE-2004-1183

Published: 06/01/2005 Updated: 11/10/2017
CVSS v2 Base Score: 5.1 | Impact Score: 6.4 | Exploitability Score: 4.9
VMScore: 454
Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P

Vulnerability Summary

Integer overflow in the tiffdump utility for libtiff 3.7.1 and previous versions allows remote malicious users to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted TIFF file.

Vulnerable Product Search on Vulmon Subscribe to Product

libtiff libtiff 3.5.6

libtiff libtiff 3.5.7

libtiff libtiff 3.5.1

libtiff libtiff 3.5.2

libtiff libtiff 3.5.3

libtiff libtiff 3.7.0

libtiff libtiff 3.7.1

libtiff libtiff 3.4

libtiff libtiff 3.6.0

libtiff libtiff 3.6.1

libtiff libtiff 3.5.4

libtiff libtiff 3.5.5

Vendor Advisories

Dmitry V Levin discovered a buffer overflow in the “tiffdump” utility If an attacker tricked a user into processing a malicious TIFF image with tiffdump, they could cause a buffer overflow which at least causes the program to crash However, it is not entirely clear whether this can be exploited to execute arbitrary code with the privileges o ...
Synopsis libtiff security update Type/Severity Security Advisory: Important Topic Updated libtiff packages that fix various integer overflows are now available Description The libtiff package contains a library of functions for manipulating TIFF(Tagged Image File Format) image format files ...
Synopsis libtiff security update Type/Severity Security Advisory: Important Topic Updated libtiff packages that fix various integer overflows are nowavailable for Red Hat Enterprise Linux 4This update has been rated as having important security impact by the Red HatSecurity Response Team Descripti ...
Dmitry V Levin discovered a buffer overflow in libtiff, the Tag Image File Format library for processing TIFF graphics files Upon reading a TIFF file it is possible to crash the application, and maybe also to execute arbitrary code For the stable distribution (woody) this problem has been fixed in version 355-6woody5 For the unstable distrib ...