Integer Overflow Vulnerability in libtiff by Telus International
CVE-2004-0886

Currently unrated

Key Information:

Vendor

Libtiff

Vendor
CVE Published:
27 January 2005

What is CVE-2004-0886?

Multiple integer overflow vulnerabilities exist in libtiff versions 3.6.1 and earlier, which can be exploited by remote attackers to cause a denial of service. This occurs when processing specially crafted TIFF images, leading to incorrect memory allocation and potential application crashes or memory corruption. Users of libtiff are advised to update their software to mitigate these issues.

References

EPSS Score

10% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.