high7.5

CVE-2004-1307

Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with …

Impact

Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overflow.

Affected products

Vendor	Product	Affected versions
Avaya	Call Management System Server	Versions 8.0, 9.0, 11.0, 12.0, 13.0
Avaya	Cvlan	All versions
Avaya	Integrated Management	All versions
Avaya	Interactive Response	All versions Versions 1.2.1, 1.3
Avaya	Intuity Audix Lx	All versions
F5	Icontrol Service Manager	Versions 1.3, 1.3.4, 1.3.5, 1.3.6
Libtiff	Libtiff	Versions 3.4, 3.5.1, 3.5.2, 3.5.3, 3.5.4, 3.5.5
Sgi	Propack	Version 3.0
Conectiva	Linux	Versions 9.0, 10.0
Avaya	Mn100	All versions
Apple	Mac Os X	Versions 10.3, 10.3.1, 10.3.2, 10.3.3, 10.3.4, 10.3.5
Apple	Mac Os X Server	Versions 10.3, 10.3.1, 10.3.2, 10.3.3, 10.3.4, 10.3.5

Impact

Affected products

References