CVE-2004-0803: Buffer Overflow

Published Oct 26, 2004
·
Updated

Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.

Affected Software

74 affected components
LibTIFF libtiff=3.6.1
PDFLib Pdf Library=5.0.2
Wxgtk2 Wxgtk2=2.5_.0
LibTIFF libtiff=3.4
LibTIFF libtiff=3.5.7
LibTIFF libtiff=3.6.0
LibTIFF libtiff=3.5.3
LibTIFF libtiff=3.5.4
LibTIFF libtiff=3.5.2
LibTIFF libtiff=3.5.5
LibTIFF libtiff=3.5.1
SUSE SuSE Linux=9.0
redhat Enterprise Linux=2.1
redhat Fedora Core=core_2.0
Apple Mac OS X Server=10.3.2
Apple iOS and macOS=10.2.5
Trustix Secure Linux=2.0
Apple Mac OS X Server=10.2.2
redhat Enterprise Linux Desktop=3.0
SUSE SuSE Linux=9.0
Apple iOS and macOS=10.2.7
Apple iOS and macOS=10.2.8
Apple Mac OS X Server=10.2.4
redhat Linux Advanced Workstation=2.1
KDE kde=3.3.1
Apple iOS and macOS=10.2.1
SUSE SuSE Linux=8.2
redhat Enterprise Linux=3.0
redhat Enterprise Linux=2.1
Apple Mac OS X Server=10.3.5
Apple iOS and macOS=10.3.1
SUSE SuSE Linux=8
KDE kde=3.2.2
SUSE SuSE Linux=1.0
KDE kde=3.2.1
Apple iOS and macOS=10.3.5
Apple Mac OS X Server=10.3.3
redhat Enterprise Linux=2.1
Apple Mac OS X Server=10.2.7
Apple Mac OS X Server=10.2.3
Apple iOS and macOS=10.2.4
Apple Mac OS X Server=10.3.4
Trustix Secure Linux=1.5
Apple iOS and macOS=10.3.2
Apple iOS and macOS=10.2.2
Apple Mac OS X Server=10.2.5
redhat Linux Advanced Workstation=2.1
SUSE SuSE Linux=9.1
Apple iOS and macOS=10.3.6
Apple Mac OS X Server=10.3
Apple Mac OS X Server=10.2.6
redhat Enterprise Linux=3.0
Apple Mac OS X Server=10.2
redhat Enterprise Linux=2.1
Apple Mac OS X Server=10.2.1
Apple Mac OS X Server=10.3.1
KDE kde=3.3
Mandrakesoft Mandrake Linux=10.0
redhat Enterprise Linux=3.0
Apple iOS and macOS=10.3.4
redhat Enterprise Linux=2.1
Apple iOS and macOS=10.3.3
Apple iOS and macOS=10.2.6
Trustix Secure Linux=2.1
KDE kde=3.2
KDE kde=3.2.3
Apple iOS and macOS=10.2.3
Apple Mac OS X Server=10.2.8
Apple iOS and macOS=10.2
SUSE SuSE Linux=8.1
Apple iOS and macOS=10.3
redhat Enterprise Linux=2.1
Apple Mac OS X Server=10.3.6
Mandrakesoft Mandrake Linux=10.0

Event History

Oct 26, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description

Frequently Asked Questions

1

What is the severity of CVE-2004-0803?

The severity of CVE-2004-0803 is considered critical due to its potential to allow remote code execution.

2

How do I fix CVE-2004-0803?

To fix CVE-2004-0803, update your libtiff library to version 3.6.2 or later, as this version addresses the vulnerabilities.

3

What are the impacts of CVE-2004-0803?

The impacts of CVE-2004-0803 include the potential for remote attackers to execute arbitrary code through specially crafted TIFF files.

4

Which versions of libtiff are affected by CVE-2004-0803?

Versions of libtiff 3.6.1 and earlier are affected by CVE-2004-0803, including 3.5.x and 3.4.x versions.

5

Are there any workarounds for CVE-2004-0803?

A temporary workaround for CVE-2004-0803 may involve disabling the handling of TIFF files in applications that use the vulnerable libtiff library.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203