{"id":"CVE-2004-0803","aliases":["DEBIAN-CVE-2004-0803","DSA-567-1","EUVD-2004-0801","GHSA-wmr8-3pg7-vqqp","RHSA-2004:577","RHSA-2005:021","RHSA-2005:354"],"status":"published","title":"Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier,...","description":"Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.08268,"percentile":0.94943,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2004-10-15T00:00:00Z","modified":"2026-10-21T15:47:38Z","fixes":[{"ecosystem":"Debian:12","package":"tiff","fixed_in":["3.6.1-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"tiff","fixed_in":["3.6.1-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"tiff","fixed_in":["3.6.1-2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1-2"}]}]},{"source":"osv","ecosystem":"Debian:3.0","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.5-6woody1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.7-20.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"libtiff-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.7-20.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.7-20.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.7-20.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"libtiff-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.7-20.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.7-20.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.7-20.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"libtiff-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.7-20.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.7-20.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.7-20.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"libtiff-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.7-20.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.7-20.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"kdegraphics","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.1.3-3.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"kdegraphics-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.1.3-3.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"kdegraphics-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.1.3-3.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"kdegraphics","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.1.3-3.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"kdegraphics-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.1.3-3.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"kdegraphics-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.1.3-3.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"kdegraphics","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.1.3-3.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"kdegraphics-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.1.3-3.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"kdegraphics-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.1.3-3.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"kdegraphics","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.1.3-3.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"kdegraphics-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.1.3-3.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"kdegraphics-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:3.1.3-3.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"tetex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.7-67.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"tetex-afm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.7-67.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"tetex-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.7-67.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"tetex-dvips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.7-67.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"tetex-fonts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.7-67.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"tetex-latex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.7-67.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"tetex-xdvi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.7-67.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"tetex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.7-67.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"tetex-afm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.7-67.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"tetex-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.7-67.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"tetex-dvips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.7-67.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"tetex-fonts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.7-67.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"tetex-latex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.7-67.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"tetex-xdvi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.7-67.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"tetex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.7-67.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"tetex-afm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.7-67.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"tetex-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.7-67.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"tetex-dvips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.7-67.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"tetex-fonts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.7-67.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"tetex-latex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.7-67.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"tetex-xdvi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.7-67.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"tetex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.7-67.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"tetex-afm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.7-67.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"tetex-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.7-67.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"tetex-dvips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.7-67.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"tetex-fonts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.7-67.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"tetex-latex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.7-67.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"tetex-xdvi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.7-67.7"}]}],"bundled":5}],"products":[{"vendor":"apple","product":"mac_os_x"},{"vendor":"apple","product":"mac_os_x_server"},{"vendor":"kde","product":"kde"},{"vendor":"libtiff","product":"libtiff"},{"vendor":"mandrakesoft","product":"mandrake_linux"},{"vendor":"pdflib","product":"pdf_library"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"fedora_core"},{"vendor":"redhat","product":"linux_advanced_workstation"},{"vendor":"suse","product":"suse_linux"},{"vendor":"trustix","product":"secure_linux"},{"vendor":"wxgtk2","product":"wxgtk2"}],"references":[{"url":"http://www.gentoo.org/security/en/glsa/glsa-200410-11.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","web"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-577.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:109","tags":["vendor-advisory","x_refsource_MANDRAKE","x_transferred","advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100114","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","web"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-021.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","web"]},{"url":"http://marc.info/?l=bugtraq\u0026m=109778785107450\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8896","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","web"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201072-1","tags":["vendor-advisory","x_refsource_SUNALERT","x_transferred","web"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101677-1","tags":["vendor-advisory","x_refsource_SUNALERT","x_transferred","web"]},{"url":"http://www.novell.com/linux/security/advisories/2004_38_libtiff.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","advisory"]},{"url":"http://scary.beasts.org/security/CESA-2004-006.txt","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"http://distro.conectiva.com.br/atualizacoes/index.php?id=a\u0026anuncio=000888","tags":["vendor-advisory","x_refsource_CONECTIVA","x_transferred","web"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:052","tags":["vendor-advisory","x_refsource_MANDRAKE","x_transferred","advisory"]},{"url":"http://www.kde.org/info/security/advisory-20041209-2.txt","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-354.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","web"]},{"url":"http://secunia.com/advisories/12818","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17703","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/11406","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://www.debian.org/security/2004/dsa-567","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"http://www.kb.cert.org/vuls/id/948752","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","Third Party Advisory","US Government Resource","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-0803","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-wmr8-3pg7-vqqp"},{"url":"https://security-tracker.debian.org/tracker/CVE-2004-0803","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2004:577","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=134847","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=134850","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_577.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2004-0803","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617294","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2004-0803","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2004-0804","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617295","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2004-0804","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-0804","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2004-0886","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617314","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2004-0886","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-0886","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2004-1307","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617405","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2004-1307","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-1307","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2005:021","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=135466","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=135470","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_021.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2004-1308","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617406","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2004-1308","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-1308","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2005:354","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=137475","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=137607","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=137973","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=145129","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_354.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2004-0888","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617315","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2004-0888","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-0888","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2004-1125","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617371","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2004-1125","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-1125","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2004-0803","description":"Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.","status":"published","published":"2004-10-26T04:00:00Z","modified":"2024-08-08T00:31:47.951Z","updated_at":"2026-11-02T14:34:55.098814Z"}],"euvd":[{"id":"EUVD-2004-0801","description":"Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.","status":"published","published":"2004-10-26T04:00:00Z","modified":"2024-08-08T00:31:47Z","updated_at":"2026-11-03T01:15:17.778038Z"}],"ghsa":[{"id":"GHSA-wmr8-3pg7-vqqp","title":"Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier,...","description":"Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.","status":"published","published":"2022-04-29T02:58:24Z","modified":"2023-01-30T05:02:51Z","updated_at":"2026-11-02T14:46:43.616467Z"}],"nvd":[{"id":"CVE-2004-0803","description":"Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.","status":"published","published":"2004-12-23T05:00:00Z","modified":"2026-06-16T22:06:24.753Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:51.985436Z"}],"osv":[{"id":"CVE-2004-0803","description":"Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.","status":"published","published":"2004-12-23T05:00:00Z","modified":"2026-04-10T03:35:54.871831Z","updated_at":"2026-11-02T15:43:56.315348Z"},{"id":"DEBIAN-CVE-2004-0803","description":"Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.","status":"published","published":"2004-12-23T05:00:00Z","modified":"2026-10-21T15:47:38.128017721Z","updated_at":"2026-11-02T15:45:22.55978Z"},{"id":"DSA-567-1","title":"tiff - heap overflows","status":"published","published":"2004-10-15T00:00:00Z","modified":"2026-03-09T02:11:35.548994Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"RHSA-2004:577","title":"Red Hat Security Advisory: libtiff security update","status":"published","published":"2024-09-15T14:57:25Z","modified":"2026-06-26T10:01:41Z","updated_at":"2026-11-02T15:52:59.135214Z"},{"id":"RHSA-2005:021","title":"Red Hat Security Advisory: kdegraphics security update","status":"published","published":"2024-09-15T14:57:33Z","modified":"2026-06-26T10:01:57Z","updated_at":"2026-11-02T15:52:59.135214Z"},{"id":"RHSA-2005:354","title":"Red Hat Security Advisory: tetex security update","status":"published","published":"2024-09-15T15:03:05Z","modified":"2026-06-26T10:02:54Z","updated_at":"2026-11-02T15:52:59.135214Z"}]}}