5

CVE-2004-0886

Exploit
Multiple integer overflows in libtiff 3.6.1 and earlier allow remote attackers to cause a denial of service (crash or memory corruption) via TIFF images that lead to incorrect malloc calls.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Libtiff ≫ Libtiff Version3.4
Libtiff ≫ Libtiff Version3.5.1
Libtiff ≫ Libtiff Version3.5.2
Libtiff ≫ Libtiff Version3.5.3
Libtiff ≫ Libtiff Version3.5.4
Libtiff ≫ Libtiff Version3.5.5
Libtiff ≫ Libtiff Version3.5.7
Libtiff ≫ Libtiff Version3.6.0
Libtiff ≫ Libtiff Version3.6.1
Pdflib ≫ Pdf Library Version5.0.2
Wxgtk2 ≫ Wxgtk2 Version2.5_.0
Apple ≫ macOS X Version10.2
Apple ≫ macOS X Version10.2.1
Apple ≫ macOS X Version10.2.2
Apple ≫ macOS X Version10.2.3
Apple ≫ macOS X Version10.2.4
Apple ≫ macOS X Version10.2.5
Apple ≫ macOS X Version10.2.6
Apple ≫ macOS X Version10.2.7
Apple ≫ macOS X Version10.2.8
Apple ≫ macOS X Version10.3
Apple ≫ macOS X Version10.3.1
Apple ≫ macOS X Version10.3.2
Apple ≫ macOS X Version10.3.3
Apple ≫ macOS X Version10.3.4
Apple ≫ macOS X Version10.3.5
Apple ≫ macOS X Version10.3.6
Apple ≫ macOS X Server Version10.2
Apple ≫ macOS X Server Version10.2.1
Apple ≫ macOS X Server Version10.2.2
Apple ≫ macOS X Server Version10.2.3
Apple ≫ macOS X Server Version10.2.4
Apple ≫ macOS X Server Version10.2.5
Apple ≫ macOS X Server Version10.2.6
Apple ≫ macOS X Server Version10.2.7
Apple ≫ macOS X Server Version10.2.8
Apple ≫ macOS X Server Version10.3
Apple ≫ macOS X Server Version10.3.1
Apple ≫ macOS X Server Version10.3.2
Apple ≫ macOS X Server Version10.3.3
Apple ≫ macOS X Server Version10.3.4
Apple ≫ macOS X Server Version10.3.5
Apple ≫ macOS X Server Version10.3.6
Kde ≫ Kde Version3.2
Kde ≫ Kde Version3.2.1
Kde ≫ Kde Version3.2.2
Kde ≫ Kde Version3.2.3
Kde ≫ Kde Version3.3
Kde ≫ Kde Version3.3.1
Mandrakesoft ≫ Mandrake Linux Version10.0
Mandrakesoft ≫ Mandrake Linux Version10.0 Editionamd64
Redhat ≫ Enterprise Linux Version2.1 Editionadvanced_server
Redhat ≫ Enterprise Linux Version2.1 Editionadvanced_server_ia64
Redhat ≫ Enterprise Linux Version2.1 Editionenterprise_server
Redhat ≫ Enterprise Linux Version2.1 Editionenterprise_server_ia64
Redhat ≫ Enterprise Linux Version2.1 Editionworkstation
Redhat ≫ Enterprise Linux Version2.1 Editionworkstation_ia64
Redhat ≫ Enterprise Linux Version3.0 Editionadvanced_server
Redhat ≫ Enterprise Linux Version3.0 Editionenterprise_server
Redhat ≫ Enterprise Linux Version3.0 Editionworkstation_server
Redhat ≫ Fedora Core Versioncore_2.0
Redhat ≫ Linux Advanced Workstation Version2.1 Editionia64
Redhat ≫ Linux Advanced Workstation Version2.1 Editionitanium_processor
Suse ≫ Suse Linux Version1.0 Editiondesktop
Suse ≫ Suse Linux Version8 Editionenterprise_server
Suse ≫ Suse Linux Version8.1
Suse ≫ Suse Linux Version8.2
Suse ≫ Suse Linux Version9.0
Suse ≫ Suse Linux Version9.0 Editionenterprise_server
Suse ≫ Suse Linux Version9.1
Trustix ≫ Secure Linux Version1.5
Trustix ≫ Secure Linux Version2.0
Trustix ≫ Secure Linux Version2.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.44% 0.917
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000888
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101677-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201072-1
http://www.debian.org/security/2004/dsa-567
http://www.kde.org/info/security/advisory-20041209-2.txt
http://www.mandriva.com/security/advisories?name=MDKSA-2004:109
http://www.mandriva.com/security/advisories?name=MDKSA-2005:052
http://www.novell.com/linux/security/advisories/2004_38_libtiff.html
http://www.redhat.com/support/errata/RHSA-2004-577.html
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-021.html
http://www.redhat.com/support/errata/RHSA-2005-354.html
http://www.trustix.org/errata/2004/0054/
http://secunia.com/advisories/12818
http://www.securityfocus.com/bid/11406
Patch
Vendor Advisory
Exploit
http://marc.info/?l=bugtraq&m=109779465621929&w=2
http://securitytracker.com/id?1011674
http://www.ciac.org/ciac/bulletins/p-015.shtml
http://www.kb.cert.org/vuls/id/687568
US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/17715
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100116
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9907