← Database

CVE-2004-1307

HIGH CVSS: 7.5 Published: 2004-12-21 Modified: 2026-06-16

Description

Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overflow.

Affected Platforms

F5 Icontrol Service ManagerSco UnixwareSgi PropackAvaya Call Management System ServerAvaya Intuity Audix LxMandrakesoft Mandrake Linux Corporate ServerGentoo LinuxApple Mac Os X ServerAvaya Interactive ResponseSun Sunos

Weakness Type

NVD-CWE-Other

References