Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2004-1308HistoryJan 10, 2005 - 5:00 a.m.
CVE-2004-1308
2005-01-1005:00:00
Debian Security Bug Tracker
security-tracker.debian.org
11
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.129 Low
EPSS
Percentile
95.5%
Integer overflow in (1) tif_dirread.c and (2) tif_fax3.c for libtiff 3.5.7 and 3.7.0 allows remote attackers to execute arbitrary code via a TIFF file containing a TIFF_ASCII or TIFF_UNDEFINED directory entry with a -1 entry count, which leads to a heap-based buffer overflow.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | tiff | < 3.6.1-4 | tiff_3.6.1-4_all.deb |
| Debian | 11 | all | tiff | < 3.6.1-4 | tiff_3.6.1-4_all.deb |
| Debian | 999 | all | tiff | < 3.6.1-4 | tiff_3.6.1-4_all.deb |
| Debian | 13 | all | tiff | < 3.6.1-4 | tiff_3.6.1-4_all.deb |
Related
nessus
nessus
Ubuntu 4.10 : tiff vulnerability (USN-46-1)
2006-01-15 00:00:00
Fedora Core 3 : libtiff-3.6.1-8.fc3 (2004-577)
2004-12-23 00:00:00
Fedora Core 2 : libtiff-3.5.7-21.fc2 (2004-576)
2004-12-23 00:00:00
ubuntucve
ubuntucve
CVE-2004-1308
2005-01-10 00:00:00
ubuntu
ubuntu
TIFF library vulnerability
2004-12-22 00:00:00
cvelist
cvelist
CVE-2004-1308
2004-12-22 05:00:00
freebsd
freebsd
tiff -- directory entry count integer overflow vulnerability
2004-12-17 00:00:00
openvas
openvas
Debian Security Advisory DSA 617-1 (tiff)
2008-01-17 00:00:00
FreeBSD Ports: tiff
2008-09-04 00:00:00
Debian: Security Advisory (DSA-617-1)
2008-01-17 00:00:00
nvd
nvd
CVE-2004-1308
2005-01-10 05:00:00
osv
osv
libtiff - insufficient input validation
2004-12-24 00:00:00
debian
debian
[SECURITY] [DSA 617-1] New libtiff packages fix arbitrary code execution
2004-12-24 14:15:44
[SECURITY] [DSA 617-1] New libtiff packages fix arbitrary code execution
2004-12-24 14:15:44
cve
cve
CVE-2004-1308
2005-01-10 05:00:00
cert
cert
LibTIFF vulnerable to integer overflow via corrupted directory entry count
2005-01-11 00:00:00
LibTIFF vulnerable to integer overflow in the TIFFFetchStrip() routine
2005-01-20 00:00:00
gentoo
gentoo
tiff: New overflows in image decoding
2005-01-05 00:00:00
securityvulns
securityvulns
redhat
redhat
(RHSA-2005:019) libtiff security update
2005-01-13 00:00:00
(RHSA-2005:035) libtiff security update
2005-02-15 00:00:00
(RHSA-2005:021) kdegraphics security update
2005-04-12 00:00:00
suse
suse
remote system compromise in libtiff/tiff
2005-01-10 10:35:29
centos
centos
kdegraphics security update
2005-04-12 23:05:10
kdegraphics security update
2005-04-12 16:01:20
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.129 Low
EPSS
Percentile
95.5%
Related for DEBIANCVE:CVE-2004-1308