Every CVE Search/ Get API key

CVE-2004-0803

Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier,...

7.5 HighFix available

CVE-2004-0803 is a high vulnerability (CVSS 7.5) in Libtiff, published October 15, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 8.27%, the 94th percentile. Fixed in tiff 3.6.1-2.

Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.

Exploit likelihood

8.27%Down 3.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.

Record
CVE-2004-0803
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.

Record
CVE-2004-0803
Updated
2026-11-02
EUVDEUVD-2004-0801 No score

Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.

Record
EUVD-2004-0801
Updated
2026-11-03
GitHub AdvisoriesGHSA-wmr8-3pg7-vqqp No score

Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier,...

Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.

Record
GHSA-wmr8-3pg7-vqqp
Updated
2026-11-02
OSV No score

Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.

Record
CVE-2004-0803
Updated
2026-11-02
OSVDEBIAN-CVE-2004-0803 No score

Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.

Record
DEBIAN-CVE-2004-0803
Updated
2026-11-02

Affected products

Show 1 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
tiff
Debian:12
 before 3.6.1-2
3.6.1-2
tiff
Debian:13
 before 3.6.1-2
3.6.1-2
tiff
Debian:14
 before 3.6.1-2
3.6.1-2
tiff
Debian:3.0
 before 3.5.5-6woody1
3.5.5-6woody1
libtiff
Red Hat:enterprise_linux:3::as
 before 0:3.5.7-20.1
0:3.5.7-20.1
libtiff-debuginfo
Red Hat:enterprise_linux:3::as
 before 0:3.5.7-20.1
0:3.5.7-20.1
libtiff-devel
Red Hat:enterprise_linux:3::as
 before 0:3.5.7-20.1
0:3.5.7-20.1
libtiff
Red Hat:enterprise_linux:3::desktop
 before 0:3.5.7-20.1
0:3.5.7-20.1
libtiff-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 0:3.5.7-20.1
0:3.5.7-20.1
libtiff-devel
Red Hat:enterprise_linux:3::desktop
 before 0:3.5.7-20.1
0:3.5.7-20.1
Show 46 moreShow less
Affected packages
PackageAffectedFixed
libtiff
Red Hat:enterprise_linux:3::es
 before 0:3.5.7-20.1
0:3.5.7-20.1
libtiff-debuginfo
Red Hat:enterprise_linux:3::es
 before 0:3.5.7-20.1
0:3.5.7-20.1
libtiff-devel
Red Hat:enterprise_linux:3::es
 before 0:3.5.7-20.1
0:3.5.7-20.1
libtiff
Red Hat:enterprise_linux:3::ws
 before 0:3.5.7-20.1
0:3.5.7-20.1
libtiff-debuginfo
Red Hat:enterprise_linux:3::ws
 before 0:3.5.7-20.1
0:3.5.7-20.1
libtiff-devel
Red Hat:enterprise_linux:3::ws
 before 0:3.5.7-20.1
0:3.5.7-20.1
kdegraphics
Red Hat:enterprise_linux:3::as
 before 7:3.1.3-3.7
7:3.1.3-3.7
kdegraphics-debuginfo
Red Hat:enterprise_linux:3::as
 before 7:3.1.3-3.7
7:3.1.3-3.7
kdegraphics-devel
Red Hat:enterprise_linux:3::as
 before 7:3.1.3-3.7
7:3.1.3-3.7
kdegraphics
Red Hat:enterprise_linux:3::desktop
 before 7:3.1.3-3.7
7:3.1.3-3.7
kdegraphics-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 7:3.1.3-3.7
7:3.1.3-3.7
kdegraphics-devel
Red Hat:enterprise_linux:3::desktop
 before 7:3.1.3-3.7
7:3.1.3-3.7
kdegraphics
Red Hat:enterprise_linux:3::es
 before 7:3.1.3-3.7
7:3.1.3-3.7
kdegraphics-debuginfo
Red Hat:enterprise_linux:3::es
 before 7:3.1.3-3.7
7:3.1.3-3.7
kdegraphics-devel
Red Hat:enterprise_linux:3::es
 before 7:3.1.3-3.7
7:3.1.3-3.7
kdegraphics
Red Hat:enterprise_linux:3::ws
 before 7:3.1.3-3.7
7:3.1.3-3.7
kdegraphics-debuginfo
Red Hat:enterprise_linux:3::ws
 before 7:3.1.3-3.7
7:3.1.3-3.7
kdegraphics-devel
Red Hat:enterprise_linux:3::ws
 before 7:3.1.3-3.7
7:3.1.3-3.7
tetex
Red Hat:enterprise_linux:3::as
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-afm
Red Hat:enterprise_linux:3::as
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-debuginfo
Red Hat:enterprise_linux:3::as
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-dvips
Red Hat:enterprise_linux:3::as
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-fonts
Red Hat:enterprise_linux:3::as
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-latex
Red Hat:enterprise_linux:3::as
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-xdvi
Red Hat:enterprise_linux:3::as
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex
Red Hat:enterprise_linux:3::desktop
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-afm
Red Hat:enterprise_linux:3::desktop
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-dvips
Red Hat:enterprise_linux:3::desktop
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-fonts
Red Hat:enterprise_linux:3::desktop
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-latex
Red Hat:enterprise_linux:3::desktop
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-xdvi
Red Hat:enterprise_linux:3::desktop
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex
Red Hat:enterprise_linux:3::es
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-afm
Red Hat:enterprise_linux:3::es
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-debuginfo
Red Hat:enterprise_linux:3::es
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-dvips
Red Hat:enterprise_linux:3::es
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-fonts
Red Hat:enterprise_linux:3::es
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-latex
Red Hat:enterprise_linux:3::es
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-xdvi
Red Hat:enterprise_linux:3::es
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex
Red Hat:enterprise_linux:3::ws
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-afm
Red Hat:enterprise_linux:3::ws
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-debuginfo
Red Hat:enterprise_linux:3::ws
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-dvips
Red Hat:enterprise_linux:3::ws
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-fonts
Red Hat:enterprise_linux:3::ws
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-latex
Red Hat:enterprise_linux:3::ws
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-xdvi
Red Hat:enterprise_linux:3::ws
 before 0:1.0.7-67.7
0:1.0.7-67.7

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 59 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open