CVE

Id
9735  
CVE No.
CVE-2004-1307  
Status
Candidate  
Description
Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overflow.  
Phase
Assigned (20041221)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
66040 9735 CVE-2004-1307 IDEFENSE:20041221 libtiff STRIPOFFSETS Integer Overflow Vulnerability  View
66041 9735 CVE-2004-1307 URL:http://www.idefense.com/application/poi/display?id=173&type=vulnerabilities&flashstatus=true  View
66042 9735 CVE-2004-1307 APPLE:APPLE-SA-2005-05-03  View
66043 9735 CVE-2004-1307 URL:http://lists.apple.com/archives/security-announce/2005/May/msg00001.html  View
66044 9735 CVE-2004-1307 SUNALERT:101677  View
66045 9735 CVE-2004-1307 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-101677-1  View
66046 9735 CVE-2004-1307 SUNALERT:201072  View
66047 9735 CVE-2004-1307 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-66-201072-1  View
66048 9735 CVE-2004-1307 CERT:TA05-136A  View
66049 9735 CVE-2004-1307 URL:http://www.us-cert.gov/cas/techalerts/TA05-136A.html  View
66050 9735 CVE-2004-1307 CERT-VN:VU#539110  View
66051 9735 CVE-2004-1307 URL:http://www.kb.cert.org/vuls/id/539110  View
66052 9735 CVE-2004-1307 OVAL:oval:org.mitre.oval:def:11175  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63233 JVNDB-2004-000575 LibTIFF ライブラリの tif_dirread.c および tif_fax3.c における整数オーバーフローの脆弱性 LibTIFF ライブラリの tif_dirread.c および tif_fax3.c において、TIFF ファイルのディレクトリエントリに ASCII もしくは UNDEFINED が指定された場合の処理に不備が存在し、整数オーバーフローが発生する脆弱性が存在します。 CVE-2004-1308 9735 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000575.html  View