Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2004-1308
HistoryJan 10, 2005 - 5:00 a.m.

CVE-2004-1308

2005-01-1005:00:00
NVD-CWE-Other
[email protected]
web.nvd.nist.gov
37
cve
2004
1308
integer overflow
libtiff
remote code execution
tiff file

7.7 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.129 Low

EPSS

Percentile

95.5%

JSON

Integer overflow in (1) tif_dirread.c and (2) tif_fax3.c for libtiff 3.5.7 and 3.7.0 allows remote attackers to execute arbitrary code via a TIFF file containing a TIFF_ASCII or TIFF_UNDEFINED directory entry with a -1 entry count, which leads to a heap-based buffer overflow.

References

Related

nessus 15
ubuntucve 1
ubuntu 1
debiancve 1
cvelist 1
openvas 15
debian 2
freebsd 1
osv 1
gentoo 1
cert 2
suse 1
redhat 3
securityvulns 2
centos 2
nessus
nessus
Ubuntu 4.10 : tiff vulnerability (USN-46-1)
2006-01-15 00:00:00
Fedora Core 3 : libtiff-3.6.1-8.fc3 (2004-577)
2004-12-23 00:00:00
Fedora Core 2 : libtiff-3.5.7-21.fc2 (2004-576)
2004-12-23 00:00:00
ubuntucve
ubuntucve
CVE-2004-1308
2005-01-10 00:00:00
ubuntu
ubuntu
TIFF library vulnerability
2004-12-22 00:00:00
debiancve
debiancve
CVE-2004-1308
2005-01-10 05:00:00
cvelist
cvelist
CVE-2004-1308
2004-12-22 05:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-46-1)
2022-08-26 00:00:00
Debian: Security Advisory (DSA-617-1)
2008-01-17 00:00:00
Debian Security Advisory DSA 617-1 (tiff)
2008-01-17 00:00:00
debian
debian
[SECURITY] [DSA 617-1] New libtiff packages fix arbitrary code execution
2004-12-24 00:00:00
[SECURITY] [DSA 617-1] New libtiff packages fix arbitrary code execution
2004-12-24 14:15:44
freebsd
freebsd
tiff -- directory entry count integer overflow vulnerability
2004-12-17 00:00:00
osv
osv
libtiff - insufficient input validation
2004-12-24 00:00:00
gentoo
gentoo
tiff: New overflows in image decoding
2005-01-05 00:00:00
cert
cert
LibTIFF vulnerable to integer overflow via corrupted directory entry count
2005-01-11 00:00:00
LibTIFF vulnerable to integer overflow in the TIFFFetchStrip() routine
2005-01-20 00:00:00
suse
suse
remote system compromise in libtiff/tiff
2005-01-10 10:35:29
redhat
redhat
(RHSA-2005:035) libtiff security update
2005-02-15 00:00:00
(RHSA-2005:019) libtiff security update
2005-01-13 00:00:00
(RHSA-2005:021) kdegraphics security update
2005-04-12 00:00:00
securityvulns
securityvulns
[ GLSA 200501-06 ] tiff: New overflows in image decoding
2005-01-06 00:00:00
US-CERT Technical Cyber Security Alert TA05-136A -- Apple Mac OS X is affected by multiple vulnerabilities
2005-05-17 00:00:00
centos
centos
kdegraphics security update
2005-04-12 16:01:20
kdegraphics security update
2005-04-12 23:05:10

7.7 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.129 Low

EPSS

Percentile

95.5%

JSON
Related for CVE-2004-1308
nessus15ubuntucve1ubuntu1debiancve1cvelist1openvas15debian2freebsd1osv1gentoo1cert2suse1redhat3securityvulns2centos2