CVE-2004-1307 in Mac OS Xinfo

Summary

Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overflow.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

12/21/2004

Disclosure

12/21/2004

CPE

ready

CVSS

7.3

EPSS

0.05111

Activities

Very Low

Sources

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!