7.5

CVE-2004-0803

Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Libtiff ≫ Libtiff Version 3.4
Libtiff ≫ Libtiff Version 3.5.1
Libtiff ≫ Libtiff Version 3.5.2
Libtiff ≫ Libtiff Version 3.5.3
Libtiff ≫ Libtiff Version 3.5.4
Libtiff ≫ Libtiff Version 3.5.5
Libtiff ≫ Libtiff Version 3.5.7
Libtiff ≫ Libtiff Version 3.6.0
Libtiff ≫ Libtiff Version 3.6.1
Pdflib ≫ Pdf Library Version 5.0.2
Wxgtk2 ≫ Wxgtk2 Version 2.5_.0
Apple ≫ macOS X Version 10.2
Apple ≫ macOS X Version 10.2.1
Apple ≫ macOS X Version 10.2.2
Apple ≫ macOS X Version 10.2.3
Apple ≫ macOS X Version 10.2.4
Apple ≫ macOS X Version 10.2.5
Apple ≫ macOS X Version 10.2.6
Apple ≫ macOS X Version 10.2.7
Apple ≫ macOS X Version 10.2.8
Apple ≫ macOS X Version 10.3
Apple ≫ macOS X Version 10.3.1
Apple ≫ macOS X Version 10.3.2
Apple ≫ macOS X Version 10.3.3
Apple ≫ macOS X Version 10.3.4
Apple ≫ macOS X Version 10.3.5
Apple ≫ macOS X Version 10.3.6
Apple ≫ macOS X Server Version 10.2
Apple ≫ macOS X Server Version 10.2.1
Apple ≫ macOS X Server Version 10.2.2
Apple ≫ macOS X Server Version 10.2.3
Apple ≫ macOS X Server Version 10.2.4
Apple ≫ macOS X Server Version 10.2.5
Apple ≫ macOS X Server Version 10.2.6
Apple ≫ macOS X Server Version 10.2.7
Apple ≫ macOS X Server Version 10.2.8
Apple ≫ macOS X Server Version 10.3
Apple ≫ macOS X Server Version 10.3.1
Apple ≫ macOS X Server Version 10.3.2
Apple ≫ macOS X Server Version 10.3.3
Apple ≫ macOS X Server Version 10.3.4
Apple ≫ macOS X Server Version 10.3.5
Apple ≫ macOS X Server Version 10.3.6
Kde ≫ Kde Version 3.2
Kde ≫ Kde Version 3.2.1
Kde ≫ Kde Version 3.2.2
Kde ≫ Kde Version 3.2.3
Kde ≫ Kde Version 3.3
Kde ≫ Kde Version 3.3.1
Mandrakesoft ≫ Mandrake Linux Version 10.0
Mandrakesoft ≫ Mandrake Linux Version 10.0 Edition amd64
Redhat ≫ Enterprise Linux Version 2.1 Edition advanced_server
Redhat ≫ Enterprise Linux Version 2.1 Edition advanced_server_ia64
Redhat ≫ Enterprise Linux Version 2.1 Edition enterprise_server
Redhat ≫ Enterprise Linux Version 2.1 Edition enterprise_server_ia64
Redhat ≫ Enterprise Linux Version 2.1 Edition workstation
Redhat ≫ Enterprise Linux Version 2.1 Edition workstation_ia64
Redhat ≫ Enterprise Linux Version 3.0 Edition advanced_servers
Redhat ≫ Enterprise Linux Version 3.0 Edition enterprise_server
Redhat ≫ Enterprise Linux Version 3.0 Edition workstation
Redhat ≫ Fedora Core Version core_2.0
Redhat ≫ Linux Advanced Workstation Version 2.1 Edition ia64
Redhat ≫ Linux Advanced Workstation Version 2.1 Edition itanium_processor
Suse ≫ Suse Linux Version 1.0 Edition desktop
Suse ≫ Suse Linux Version 8 Edition enterprise_server
Suse ≫ Suse Linux Version 8.1
Suse ≫ Suse Linux Version 8.2
Suse ≫ Suse Linux Version 9.0
Suse ≫ Suse Linux Version 9.0 Edition enterprise_server
Suse ≫ Suse Linux Version 9.1
Trustix ≫ Secure Linux Version 1.5
Trustix ≫ Secure Linux Version 2.0
Trustix ≫ Secure Linux Version 2.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 8.27% 0.942
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000888
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101677-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201072-1
http://www.debian.org/security/2004/dsa-567
Patch
Vendor Advisory
http://www.kde.org/info/security/advisory-20041209-2.txt
http://www.mandriva.com/security/advisories?name=MDKSA-2004:109
http://www.mandriva.com/security/advisories?name=MDKSA-2005:052
http://www.novell.com/linux/security/advisories/2004_38_libtiff.html
http://www.redhat.com/support/errata/RHSA-2004-577.html
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-021.html
http://www.redhat.com/support/errata/RHSA-2005-354.html
http://marc.info/?l=bugtraq&m=109778785107450&w=2
http://scary.beasts.org/security/CESA-2004-006.txt
http://secunia.com/advisories/12818
http://www.gentoo.org/security/en/glsa/glsa-200410-11.xml
http://www.kb.cert.org/vuls/id/948752
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/11406
https://exchange.xforce.ibmcloud.com/vulnerabilities/17703
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100114
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8896