CVE-2004-1307

Currently unrated

Key Information:

Vendor
Avaya
Status
Interactive Response
Libtiff
Linux
Propack
Vendor
CVE Published:
21 December 2004

Summary

Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overflow.

References

http://www.us-cert.gov/cas/techalerts/TA05-136A.html
third-party-advisoryx_refsource_CERT
http://www.kb.cert.org/vuls/id/539110
third-party-advisoryx_refsource_CERT-VN
http://sunsolve.sun.com/search/document.do?assetkey=1-66-...
vendor-advisoryx_refsource_SUNALERT

EPSS Score

8% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.