Every CVESearch/Get API key

CVE-2004-1307

Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows...

7.5 HighFix available

CVE-2004-1307 is a high vulnerability (CVSS 7.5) in Libtiff, published December 21, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.34%, the 93rd percentile. Fixed in tiff 3.7.0.

What does this mean?
Severity
7.5 HighCVSS 2.0, NVD
Exploit chance
6.34%EPSS, 93rd percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
3.7.0tiff +26 more

Description

Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overflow.

Exploit likelihood

6.34%Up 0.2 points since Feb 4, 2022
90%50%10%1%

Affected products

Show 7 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
tiff
Debian:12
before 3.7.0
3.7.0
tiff
Debian:13
before 3.7.0
3.7.0
tiff
Debian:14
before 3.7.0
3.7.0
libtiff
Red Hat:enterprise_linux:3::as
From an advisory covering 4 CVEs
before 0:3.5.7-20.1
0:3.5.7-20.1
libtiff-debuginfo
Red Hat:enterprise_linux:3::as
From an advisory covering 4 CVEs
before 0:3.5.7-20.1
0:3.5.7-20.1
libtiff-devel
Red Hat:enterprise_linux:3::as
From an advisory covering 4 CVEs
before 0:3.5.7-20.1
0:3.5.7-20.1
libtiff
Red Hat:enterprise_linux:3::desktop
From an advisory covering 4 CVEs
before 0:3.5.7-20.1
0:3.5.7-20.1
libtiff-debuginfo
Red Hat:enterprise_linux:3::desktop
From an advisory covering 4 CVEs
before 0:3.5.7-20.1
0:3.5.7-20.1
libtiff-devel
Red Hat:enterprise_linux:3::desktop
From an advisory covering 4 CVEs
before 0:3.5.7-20.1
0:3.5.7-20.1
libtiff
Red Hat:enterprise_linux:3::es
From an advisory covering 4 CVEs
before 0:3.5.7-20.1
0:3.5.7-20.1
Show 17 moreShow less
Affected packages
PackageAffectedFixed
libtiff-debuginfo
Red Hat:enterprise_linux:3::es
From an advisory covering 4 CVEs
before 0:3.5.7-20.1
0:3.5.7-20.1
libtiff-devel
Red Hat:enterprise_linux:3::es
From an advisory covering 4 CVEs
before 0:3.5.7-20.1
0:3.5.7-20.1
libtiff
Red Hat:enterprise_linux:3::ws
From an advisory covering 4 CVEs
before 0:3.5.7-20.1
0:3.5.7-20.1
libtiff-debuginfo
Red Hat:enterprise_linux:3::ws
From an advisory covering 4 CVEs
before 0:3.5.7-20.1
0:3.5.7-20.1
libtiff-devel
Red Hat:enterprise_linux:3::ws
From an advisory covering 4 CVEs
before 0:3.5.7-20.1
0:3.5.7-20.1
kdegraphics
Red Hat:enterprise_linux:3::as
From an advisory covering 5 CVEs
before 7:3.1.3-3.7
7:3.1.3-3.7
kdegraphics-debuginfo
Red Hat:enterprise_linux:3::as
From an advisory covering 5 CVEs
before 7:3.1.3-3.7
7:3.1.3-3.7
kdegraphics-devel
Red Hat:enterprise_linux:3::as
From an advisory covering 5 CVEs
before 7:3.1.3-3.7
7:3.1.3-3.7
kdegraphics
Red Hat:enterprise_linux:3::desktop
From an advisory covering 5 CVEs
before 7:3.1.3-3.7
7:3.1.3-3.7
kdegraphics-debuginfo
Red Hat:enterprise_linux:3::desktop
From an advisory covering 5 CVEs
before 7:3.1.3-3.7
7:3.1.3-3.7
kdegraphics-devel
Red Hat:enterprise_linux:3::desktop
From an advisory covering 5 CVEs
before 7:3.1.3-3.7
7:3.1.3-3.7
kdegraphics
Red Hat:enterprise_linux:3::es
From an advisory covering 5 CVEs
before 7:3.1.3-3.7
7:3.1.3-3.7
kdegraphics-debuginfo
Red Hat:enterprise_linux:3::es
From an advisory covering 5 CVEs
before 7:3.1.3-3.7
7:3.1.3-3.7
kdegraphics-devel
Red Hat:enterprise_linux:3::es
From an advisory covering 5 CVEs
before 7:3.1.3-3.7
7:3.1.3-3.7
kdegraphics
Red Hat:enterprise_linux:3::ws
From an advisory covering 5 CVEs
before 7:3.1.3-3.7
7:3.1.3-3.7
kdegraphics-debuginfo
Red Hat:enterprise_linux:3::ws
From an advisory covering 5 CVEs
before 7:3.1.3-3.7
7:3.1.3-3.7
kdegraphics-devel
Red Hat:enterprise_linux:3::ws
From an advisory covering 5 CVEs
before 7:3.1.3-3.7
7:3.1.3-3.7

What each source reports

NVD Score used7.5

Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overflow.

Record
CVE-2004-1307
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE ListNo score

Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overflow.

Record
CVE-2004-1307
Updated
2026-11-02
EUVDEUVD-2004-1304No score

Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overflow.

Record
EUVD-2004-1304
Updated
2026-11-03
GitHub AdvisoriesGHSA-j2r4-vwhq-m2ggNo score

Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows...

Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overflow.

Record
GHSA-j2r4-vwhq-m2gg
Updated
2026-11-02
OSVNo score

Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overflow.

Record
CVE-2004-1307
Updated
2026-11-02
OSVDEBIAN-CVE-2004-1307No score

Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overflow.

Record
DEBIAN-CVE-2004-1307
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 32 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open