NVD

Id
71687  
Name
CVE-2004-1307  
Description
Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2004-12-21  
Modified Date
2010-08-21  
Seq
2004-1307  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
370655 71687 CVE-2004-1307 APPLE-SA-2005-05-03  View
370656 71687 CVE-2004-1307 oval:org.mitre.oval:def:11175  View
370657 71687 CVE-2004-1307 101677  View
370658 71687 CVE-2004-1307 201072  View
370659 71687 CVE-2004-1307 20041221 libtiff STRIPOFFSETS Integer Overflow Vulnerability  View
370660 71687 CVE-2004-1307 VU#539110  View
370661 71687 CVE-2004-1307 TA05-136A  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63232 JVNDB-2004-000574 LibTIFF ライブラリ の TIFFFetchStripThing() 関数における整数オーバーフローの脆弱性 LibTIFF ライブラリの TIFFFetchStripThing() 関数において、メモリ割り当てを行う CheckMalloc() 関数に引き渡される値の妥当性の確認に不備が存在するため、整数オーバーフローが発生する脆弱性が存在します。 CVE-2004-1307 9734 CVE-2004-1307 71687 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000574.html 2004-12-21 2007-04-01 View