CVE

Id
9357  
CVE No.
CVE-2004-0929  
Status
Candidate  
Description
Heap-based buffer overflow in the OJPEGVSetField function in tif_ojpeg.c for libtiff 3.6.1 and earlier, when compiled with the OJPEG_SUPPORT (old JPEG support) option, allows remote attackers to execute arbitrary code via a malformed TIFF image.  
Phase
Assigned (20041004)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
62288 9357 CVE-2004-0929 IDEFENSE:20041022 Novell SuSe Linux LibTIFF Heap Overflow Vulnerability  View
62289 9357 CVE-2004-0929 URL:http://www.idefense.com/application/poi/display?id=154&type=vulnerabilities  View
62290 9357 CVE-2004-0929 CERT-VN:VU#129910  View
62291 9357 CVE-2004-0929 URL:http://www.kb.cert.org/vuls/id/129910  View
62292 9357 CVE-2004-0929 SUSE:SUSE-SA:2004:038  View
62293 9357 CVE-2004-0929 URL:http://www.novell.com/linux/security/advisories/2004_38_libtiff.html  View
62294 9357 CVE-2004-0929 XF:libtiff-ojpegvsetfield-bo(17843)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63130 JVNDB-2004-000472 Samba の ms_fnmatch() 関数におけるサービス運用妨害 (DoS) の脆弱性 Samba に実装されている入力検証ルーチンの ms_fnmatch() には、ワイルドカード文字 "*" を含むファイル名の一致処理において、CPU リソースを大量に消費してしまう脆弱性が存在します。 CVE-2004-0930 9357 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000472.html  View