CVE-2004-1308Improper Restriction of Operations within the Bounds of a Memory Buffer in Tiff

8 documents8 sources
Severity
10.0CRITICALNVD
EPSS
12.7%
top 5.99%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 10
Latest updateApr 29

Description

Integer overflow in (1) tif_dirread.c and (2) tif_fax3.c for libtiff 3.5.7 and 3.7.0 allows remote attackers to execute arbitrary code via a TIFF file containing a TIFF_ASCII or TIFF_UNDEFINED directory entry with a -1 entry count, which leads to a heap-based buffer overflow.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages2 packages

NVDlibtiff/libtiff10 versions+9
debiandebian/tiff< tiff 3.6.1-4 (bookworm)

Patches

🔴Vulnerability Details

2
GHSA
GHSA-6prx-h64j-5pw3: Integer overflow in (1) tif_dirread2022-04-29
OSV
CVE-2004-1308: Integer overflow in (1) tif_dirread2005-01-10

📋Vendor Advisories

3
Ubuntu
TIFF library vulnerability2004-12-22
Red Hat
security flaw2004-12-21
Debian
CVE-2004-1308: tiff - Integer overflow in (1) tif_dirread.c and (2) tif_fax3.c for libtiff 3.5.7 and 3...2004

📄Research Papers

1
arXiv
o-glasses: Visualizing x86 Code from Binary Using a 1d-CNN2018-06-14

💬Community

1
Bugzilla
CVE-2004-1308 security flaw2018-08-16