Vulnerability in Apple Mac Os X
CVE-2004-0886
Multiple integer overflows in libtiff 3.6.1 and earlier allow remote attackers to cause a denial of service (crash or memory corruption) via TIFF images that lead to incorrect malloc calls.
EPSS: 0.054 (91.9th percentile) — read the EPSS interpretation.
Affected products
- Apple Mac_os_x — versions 10.2, 10.2.1, 10.2.2
- Apple Mac_os_x_server — versions 10.2, 10.2.1, 10.2.2
- Kde — versions 3.2, 3.2.1, 3.2.2
- Libtiff — versions 3.4, 3.5.1, 3.5.2
- Mandrakesoft Mandrake_linux — versions 10.0
- Pdflib Pdf_library — versions 5.0.2
- Trustix Secure_linux — versions 1.5, 2.0, 2.1
- Wxgtk2 — versions 2.5_.0
- Redhat Enterprise_linux — versions 2.1, 3.0
- Redhat Enterprise_linux_desktop — versions 3.0
References
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Patch, Vendor Advisory)
- cve@mitre.org (vendor-advisory, x_refsource_MANDRAKE)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory)
- cve@mitre.org (government-resource, x_refsource_CIAC, third-party-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_SUNALERT)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (vendor-advisory, x_refsource_SUNALERT)
- cve@mitre.org (vendor-advisory, x_refsource_SUSE)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)