CVE-2004-1183
Integer overflow in the tiffdump utility for libtiff 3.7.1 and earlier allows remote attackers to...
Integer overflow in the tiffdump utility for libtiff 3.7.1 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted TIFF file.
Exploit likelihood
What each source reports
NVD Score used
Integer overflow in the tiffdump utility for libtiff 3.7.1 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted TIFF file.
- Record
CVE-2004-1183- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Integer overflow in the tiffdump utility for libtiff 3.7.1 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted TIFF file.
- Record
CVE-2004-1183- Updated
- 2026-11-02
EUVDEUVD-2004-1180 No score
Integer overflow in the tiffdump utility for libtiff 3.7.1 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted TIFF file.
- Record
EUVD-2004-1180- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hq62-22vf-mhg5 No score
Integer overflow in the tiffdump utility for libtiff 3.7.1 and earlier allows remote attackers to...
Integer overflow in the tiffdump utility for libtiff 3.7.1 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted TIFF file.
- Record
GHSA-hq62-22vf-mhg5- Updated
- 2026-11-02
OSV No score
Integer overflow in the tiffdump utility for libtiff 3.7.1 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted TIFF file.
- Record
CVE-2004-1183- Updated
- 2026-11-02
OSVDEBIAN-CVE-2004-1183 No score
Integer overflow in the tiffdump utility for libtiff 3.7.1 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted TIFF file.
- Record
DEBIAN-CVE-2004-1183- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
tiffDebian:12 |
before 3.6.1-5 | 3.6.1-5 |
tiffDebian:13 |
before 3.6.1-5 | 3.6.1-5 |
tiffDebian:14 |
before 3.6.1-5 | 3.6.1-5 |
tiffDebian:3.0 |
before 3.5.5-6.woody5, plus listed versions 3.5.5-6.woody3 |
3.5.5-6.woody5 |
libtiffRed Hat:enterprise_linux:3::as |
before 0:3.5.7-22.el3 | 0:3.5.7-22.el3 |
libtiff-debuginfoRed Hat:enterprise_linux:3::as |
before 0:3.5.7-22.el3 | 0:3.5.7-22.el3 |
libtiff-develRed Hat:enterprise_linux:3::as |
before 0:3.5.7-22.el3 | 0:3.5.7-22.el3 |
libtiffRed Hat:enterprise_linux:3::desktop |
before 0:3.5.7-22.el3 | 0:3.5.7-22.el3 |
libtiff-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:3.5.7-22.el3 | 0:3.5.7-22.el3 |
libtiff-develRed Hat:enterprise_linux:3::desktop |
before 0:3.5.7-22.el3 | 0:3.5.7-22.el3 |
Show 18 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libtiffRed Hat:enterprise_linux:3::es |
before 0:3.5.7-22.el3 | 0:3.5.7-22.el3 |
libtiff-debuginfoRed Hat:enterprise_linux:3::es |
before 0:3.5.7-22.el3 | 0:3.5.7-22.el3 |
libtiff-develRed Hat:enterprise_linux:3::es |
before 0:3.5.7-22.el3 | 0:3.5.7-22.el3 |
libtiffRed Hat:enterprise_linux:3::ws |
before 0:3.5.7-22.el3 | 0:3.5.7-22.el3 |
libtiff-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:3.5.7-22.el3 | 0:3.5.7-22.el3 |
libtiff-develRed Hat:enterprise_linux:3::ws |
before 0:3.5.7-22.el3 | 0:3.5.7-22.el3 |
libtiffRed Hat:enterprise_linux:4::as |
before 0:3.6.1-8 | 0:3.6.1-8 |
libtiff-debuginfoRed Hat:enterprise_linux:4::as |
before 0:3.6.1-8 | 0:3.6.1-8 |
libtiff-develRed Hat:enterprise_linux:4::as |
before 0:3.6.1-8 | 0:3.6.1-8 |
libtiffRed Hat:enterprise_linux:4::desktop |
before 0:3.6.1-8 | 0:3.6.1-8 |
libtiff-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:3.6.1-8 | 0:3.6.1-8 |
libtiff-develRed Hat:enterprise_linux:4::desktop |
before 0:3.6.1-8 | 0:3.6.1-8 |
libtiffRed Hat:enterprise_linux:4::es |
before 0:3.6.1-8 | 0:3.6.1-8 |
libtiff-debuginfoRed Hat:enterprise_linux:4::es |
before 0:3.6.1-8 | 0:3.6.1-8 |
libtiff-develRed Hat:enterprise_linux:4::es |
before 0:3.6.1-8 | 0:3.6.1-8 |
libtiffRed Hat:enterprise_linux:4::ws |
before 0:3.6.1-8 | 0:3.6.1-8 |
libtiff-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:3.6.1-8 | 0:3.6.1-8 |
libtiff-develRed Hat:enterprise_linux:4::ws |
before 0:3.6.1-8 | 0:3.6.1-8 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-1183 is a medium vulnerability (CVSS 5.1) in Libtiff, published January 6, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.88%, the 90th percentile. Fixed in tiff 3.6.1-5.
References
redhat.com/support/errata/RHSA-2005-019.html
mandriva.com/security/advisories?name=MDKSA-2005:001
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9743
securityfocus.com/bid/12173
debian.org/security/2004/dsa-626
Show 28 moreShow less
secunia.com/advisories/13728
exchange.xforce.ibmcloud.com/vulnerabilities/18782
novell.com/linux/security/advisories/2005_01_libtiff_tiff.html
marc.info?l=bugtraq&m=110503635113419&w=2
security.gentoo.org/glsa/glsa-200501-06.xml
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000920
nvd.nist.gov/vuln/detail/CVE-2004-1183
github.com/advisories/GHSA-hq62-22vf-mhg5
security-tracker.debian.org/tracker/CVE-2004-1183
access.redhat.com/errata/RHSA-2005:019
bugzilla.redhat.com/show_bug.cgi?id=143505
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_019.json
cve.org/CVERecord?id=CVE-2004-1183