CVE-2004-1183
CVE-2004-1183
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Integer overflow in the tiffdump utility for libtiff 3.7.1 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted TIFF file.
EPSS 3.9% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://www.redhat.com/support/errata/RHSA-2005-019.html
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:001
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9743
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:002
- http://www.securityfocus.com/bid/12173
- http://www.debian.org/security/2004/dsa-626
- http://secunia.com/advisories/13728/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18782
- http://www.novell.com/linux/security/advisories/2005_01_libtiff_tiff.html
- http://marc.info/?l=bugtraq&m=110503635113419&w=2
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:052
- http://security.gentoo.org/glsa/glsa-200501-06.xml
- http://www.redhat.com/support/errata/RHSA-2005-035.html
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000920
- http://secunia.com/advisories/13776
- https://nvd.nist.gov/vuln/detail/CVE-2004-1183