What’s Vulnerable › Vulnerabilities

CVE-2004-0803

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 8.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2004-12-23 · updated 2026-06-16

Description

Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.

Affected products

• macOS: 10.2, 10.2.1, 10.2.2, 10.2.3, 10.2.4, 10.2.5 (+10)
• Apple Mac Os X Server: 10.2, 10.2.1, 10.2.2, 10.2.3, 10.2.4, 10.2.5 (+10)
• Kde: 3.2, 3.2.1, 3.2.2, 3.2.3, 3.3, 3.3.1
• libtiff: 3.4, 3.5.1, 3.5.2, 3.5.3, 3.5.4, 3.5.5 (+3)
• Mandrakesoft Mandrake Linux: 10.0
• Pdflib Pdf Library: 5.0.2
• Red Hat Enterprise Linux: 2.1, 3.0
• RedHat Enterprise Linux Desktop: 3.0
• RedHat Fedora Core: core_2.0
• RedHat Linux Advanced Workstation: 2.1
• Suse Linux: 1.0, 8, 8.1, 8.2, 9.0, 9.1
• Trustix Secure Linux: 1.5, 2.0, 2.1
• Wxgtk2: 2.5_.0

References

• http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000888
• http://marc.info/?l=bugtraq&m=109778785107450&w=2
• http://scary.beasts.org/security/CESA-2004-006.txt
• http://secunia.com/advisories/12818
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-101677-1
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-201072-1
• http://www.debian.org/security/2004/dsa-567
• http://www.gentoo.org/security/en/glsa/glsa-200410-11.xml
• http://www.kb.cert.org/vuls/id/948752
• http://www.kde.org/info/security/advisory-20041209-2.txt
• http://www.mandriva.com/security/advisories?name=MDKSA-2004:109
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:052

Get alerted when CVE-2004-0803 or the next vulnerability affects your stack