FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-1183

This CVE name corresponds to:

Entered	Topic
2005-01-06	tiff -- tiffdump integer overflow vulnerability

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2004-1183 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2004-1183
Phase	Assigned(20041213)

Description

Integer overflow in the tiffdump utility for libtiff 3.7.1 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted TIFF file.

References

Source	Reference
CONECTIVA	CLA-2005:920
DEBIAN	DSA-626
GENTOO	GLSA-200501-06
MANDRAKE	MDKSA-2005:001
MANDRAKE	MDKSA-2005:002
MANDRAKE	MDKSA-2005:052
REDHAT	RHSA-2005:019
REDHAT	RHSA-2005:035
SUSE	SUSE-SA:2005:001
BUGTRAQ	20050106 [USN-54-1] TIFF library tool vulnerability
BID	12173
OVAL	oval:org.mitre.oval:def:9743
SECUNIA	13728
SECUNIA	13776
XF	libtiff-tiffdump-bo(18782)