CVE-2004-0886

Multiple integer overflows in libtiff 3.6.1 and earlier allow remote attackers to cause a denial of service (crash or memory corruption) via TIFF images that lead to incorrect malloc calls.

Affected Software

Name	Vendor	Start Version	End Version
Libtiff	Libtiff	3.4 (including)	3.4 (including)
Libtiff	Libtiff	3.5.1 (including)	3.5.1 (including)
Libtiff	Libtiff	3.5.2 (including)	3.5.2 (including)
Libtiff	Libtiff	3.5.3 (including)	3.5.3 (including)
Libtiff	Libtiff	3.5.4 (including)	3.5.4 (including)
Libtiff	Libtiff	3.5.5 (including)	3.5.5 (including)
Libtiff	Libtiff	3.5.7 (including)	3.5.7 (including)
Libtiff	Libtiff	3.6.0 (including)	3.6.0 (including)
Libtiff	Libtiff	3.6.1 (including)	3.6.1 (including)
Pdf_library	Pdflib	5.0.2 (including)	5.0.2 (including)
Wxgtk2	Wxgtk2	*	*
Wxgtk2	Wxgtk2	2.5_.0 (including)	2.5_.0 (including)
Red Hat Enterprise Linux 3	RedHat	libtiff-0:3.5.7-20.1	*
Red Hat Enterprise Linux 3	RedHat	kdegraphics-7:3.1.3-3.7	*
Red Hat Enterprise Linux 3	RedHat	tetex-0:1.0.7-67.7	*
Tiff	Ubuntu	dapper	*
Tiff	Ubuntu	devel	*
Tiff	Ubuntu	edgy	*
Tiff	Ubuntu	feisty	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2004-0886
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html

Affected Software

References