CVE-2004-0803
CVE-2004-0803
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.
EPSS 8,3% · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
n/a
- Versions du logiciel
- n/a: Concernée
Aucun correctif publié
tiff Debian:12
- Plages de versions concernées
- ECOSYSTEM: < 3.6.1-2
Mettez à jour vers 3.6.1-2
tiff Debian:13
- Plages de versions concernées
- ECOSYSTEM: < 3.6.1-2
Mettez à jour vers 3.6.1-2
tiff Debian:14
- Plages de versions concernées
- ECOSYSTEM: < 3.6.1-2
Mettez à jour vers 3.6.1-2
Sources originales
- http://www.gentoo.org/security/en/glsa/glsa-200410-11.xml
- http://www.redhat.com/support/errata/RHSA-2004-577.html
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:109
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100114
- http://www.redhat.com/support/errata/RHSA-2005-021.html
- http://marc.info/?l=bugtraq&m=109778785107450&w=2
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8896
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-201072-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-101677-1
- http://www.novell.com/linux/security/advisories/2004_38_libtiff.html
- http://scary.beasts.org/security/CESA-2004-006.txt
- http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000888
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:052
- http://www.kde.org/info/security/advisory-20041209-2.txt
- http://www.redhat.com/support/errata/RHSA-2005-354.html
- http://secunia.com/advisories/12818
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17703
- http://www.securityfocus.com/bid/11406
- http://www.debian.org/security/2004/dsa-567
- http://www.kb.cert.org/vuls/id/948752
- https://nvd.nist.gov/vuln/detail/CVE-2004-0803