Lucene search
Ubuntu.comUB:CVE-2004-1308HistoryJan 10, 2005 - 12:00 a.m.
CVE-2004-1308
2005-01-1000:00:00
ubuntu.com
ubuntu.com
17
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.129 Low
EPSS
Percentile
95.5%
Integer overflow in (1) tif_dirread.c and (2) tif_fax3.c for libtiff 3.5.7
and 3.7.0 allows remote attackers to execute arbitrary code via a TIFF file
containing a TIFF_ASCII or TIFF_UNDEFINED directory entry with a -1 entry
count, which leads to a heap-based buffer overflow.
Related
nessus
nessus
Ubuntu 4.10 : tiff vulnerability (USN-46-1)
2006-01-15 00:00:00
Fedora Core 3 : libtiff-3.6.1-8.fc3 (2004-577)
2004-12-23 00:00:00
Fedora Core 2 : libtiff-3.5.7-21.fc2 (2004-576)
2004-12-23 00:00:00
ubuntu
ubuntu
TIFF library vulnerability
2004-12-22 00:00:00
debiancve
debiancve
CVE-2004-1308
2005-01-10 05:00:00
cvelist
cvelist
CVE-2004-1308
2004-12-22 05:00:00
openvas
openvas
FreeBSD Ports: tiff
2008-09-04 00:00:00
Debian Security Advisory DSA 617-1 (tiff)
2008-01-17 00:00:00
FreeBSD Ports: tiff
2008-09-04 00:00:00
freebsd
freebsd
tiff -- directory entry count integer overflow vulnerability
2004-12-17 00:00:00
cve
cve
CVE-2004-1308
2005-01-10 05:00:00
debian
debian
[SECURITY] [DSA 617-1] New libtiff packages fix arbitrary code execution
2004-12-24 00:00:00
[SECURITY] [DSA 617-1] New libtiff packages fix arbitrary code execution
2004-12-24 14:15:44
osv
osv
libtiff - insufficient input validation
2004-12-24 00:00:00
cert
cert
LibTIFF vulnerable to integer overflow via corrupted directory entry count
2005-01-11 00:00:00
LibTIFF vulnerable to integer overflow in the TIFFFetchStrip() routine
2005-01-20 00:00:00
suse
suse
remote system compromise in libtiff/tiff
2005-01-10 10:35:29
redhat
redhat
(RHSA-2005:035) libtiff security update
2005-02-15 00:00:00
(RHSA-2005:019) libtiff security update
2005-01-13 00:00:00
(RHSA-2005:021) kdegraphics security update
2005-04-12 00:00:00
securityvulns
securityvulns
gentoo
gentoo
tiff: New overflows in image decoding
2005-01-05 00:00:00
centos
centos
kdegraphics security update
2005-04-12 16:01:20
kdegraphics security update
2005-04-12 23:05:10
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.129 Low
EPSS
Percentile
95.5%
Related for UB:CVE-2004-1308