NetSight
IP …
medium5.0

CVE-2004-0886

Multiple integer overflows in libtiff 3.6.1 and earlier allow remote attackers to cause a denial of service (crash or memory corruption) via TIFF images that l…

Impact

Multiple integer overflows in libtiff 3.6.1 and earlier allow remote attackers to cause a denial of service (crash or memory corruption) via TIFF images that lead to incorrect malloc calls.

Affected products

VendorProductAffected versions
LibtiffLibtiff
Versions 3.4, 3.5.1, 3.5.2, 3.5.3, 3.5.4, 3.5.5
PdflibPdf Library
Version 5.0.2
Wxgtk2Wxgtk2
All versions
Version 2.5_.0
AppleMac Os X
Versions 10.2, 10.2.1, 10.2.2, 10.2.3, 10.2.4, 10.2.5
AppleMac Os X Server
Versions 10.2, 10.2.1, 10.2.2, 10.2.3, 10.2.4, 10.2.5
KdeKde
Versions 3.2, 3.2.1, 3.2.2, 3.2.3, 3.3, 3.3.1
MandrakesoftMandrake Linux
Version 10.0
RedhatEnterprise Linux
Versions 2.1, 3.0
RedhatEnterprise Linux Desktop
Version 3.0
RedhatFedora Core
Version core_2.0
RedhatLinux Advanced Workstation
Version 2.1
SuseSuse Linux
Versions 1.0, 8, 8.1, 8.2, 9.0, 9.1

References