CVE-2004-0929 Heap-based buffer overflow in the OJPEGVSetField function in tif_ojpeg.c for libtiff 3.6.1 and earlier, when compiled with the OJPEG_SUPPORT (old JPEG support) option, allows remote attackers to execu...
HighCVSS 10.0
EPSS 8.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the OJPEGVSetField function in tif_ojpeg.c for libtiff 3.6.1 and earlier, when compiled with the OJPEG_SUPPORT (old JPEG support) option, allows remote attackers to execute arbitrary code via a malformed TIFF image.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| libtiff | = 3.6.1 | No fix listed |
| suse linux | = 1.0 | No fix listed |
| suse linux | = 8 | No fix listed |
| suse linux | = 8.1 | No fix listed |
| suse linux | = 8.2 | No fix listed |
| suse linux | = 9.0 | No fix listed |
| suse linux | = 9.1 | No fix listed |
References
- 20041022 Novell SuSe Linux LibTIFF Heap Overflow Vulnerability patch third-party-advisory vendor-advisory
- VU#129910 third-party-advisory us-government-resource
- SUSE-SA:2004:038 vendor-advisory
- libtiff-ojpegvsetfield-bo(17843) vdb-entry