CVE-2004-0929: Buffer Overflow
Published Oct 26, 2004
·Updated
Heap-based buffer overflow in the OJPEGVSetField function in tifojpeg.c for libtiff 3.6.1 and earlier, when compiled with the OJPEGSUPPORT (old JPEG support) option, allows remote attackers to execute arbitrary code via a malformed TIFF image.
Affected Software
8 affected components
LibTIFF libtiff=3.6.1
SUSE SuSE Linux=1.0
SUSE SuSE Linux=8
SUSE SuSE Linux=8.1
SUSE SuSE Linux=8.2
SUSE SuSE Linux=9.0
SUSE SuSE Linux=9.0
SUSE SuSE Linux=9.1
Remediation
Event History
Oct 26, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0929?
CVE-2004-0929 has a high severity rating due to the potential for remote code execution.
2
How do I fix CVE-2004-0929?
To fix CVE-2004-0929, you should update libtiff to a version later than 3.6.1 that does not include OJPEG_SUPPORT.
3
What software is affected by CVE-2004-0929?
CVE-2004-0929 affects libtiff version 3.6.1 and earlier, particularly in certain versions of SUSE Linux.
4
Can CVE-2004-0929 be exploited remotely?
Yes, CVE-2004-0929 can be exploited remotely through the use of a malformed TIFF image.
5
What are the consequences of CVE-2004-0929 vulnerability?
The consequences of CVE-2004-0929 include potential arbitrary code execution, leading to system compromise.