CVE-2004-1307

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-12-21 · updated 2026-06-16

Description

Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overflow.

Affected products

macOS: 10.3, 10.3.1, 10.3.2, 10.3.3, 10.3.4, 10.3.5 (+4)
Apple Mac Os X Server: 10.3, 10.3.1, 10.3.2, 10.3.3, 10.3.4, 10.3.5 (+4)
Avaya Call Management System Server: 8.0, 9.0, 11.0, 12.0, 13.0
Avaya Cvlan: all versions
Avaya Integrated Management: all versions
Avaya Interactive Response: 1.2.1, 1.3
Avaya Intuity Audix Lx: all versions
Avaya Mn100: all versions
Avaya Modular Messaging Message Storage Server: 1.1, 2.0
Conectiva Linux: 9.0, 10.0
F5 Icontrol Service Manager: 1.3, 1.3.4, 1.3.5, 1.3.6
gentoo Linux: all versions
libtiff: 3.4, 3.5.1, 3.5.2, 3.5.3, 3.5.4, 3.5.5 (+4)
Mandrakesoft Mandrake Linux: 10.0, 10.1
Mandrakesoft Mandrake Linux Corporate Server: 3.0
Sco Unixware: 7.1.4
Sgi Propack: 3.0
Sun Solaris: 7.0, 8.0, 9.0, 9.0-x86_update_2, 10.0
Sunos: 5.7, 5.8

References

Get alerted when CVE-2004-1307 or the next vulnerability affects your stack