CVE-2004-1307
No CVSS score yet. EPSS 6.3% chance of exploitation in the next 30 days.
Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overflow.
- EPSS
- 6.3% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apple:mac_os_x
- apple:mac_os_x_server
- avaya:call_management_system_server
- avaya:cvlan
- avaya:integrated_management
- avaya:interactive_response
- avaya:intuity_audix_lx
- avaya:mn100
- avaya:modular_messaging_message_storage_server
- conectiva:linux
- f5:icontrol_service_manager
- gentoo:linux
- libtiff:libtiff
- mandrakesoft:mandrake_linux
- mandrakesoft:mandrake_linux_corporate_server
- sco:unixware
- sgi:propack
- sun:solaris
- sun:sunos
References
- http://lists.apple.com/archives/security-announce/2005/May/msg00001.html
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-101677-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-201072-1
- http://www.idefense.com/application/poi/display?id=173&type=vulnerabilities&flashstatus=true
- http://www.kb.cert.org/vuls/id/539110