CVE-2004-0929

Heap-based buffer overflow in the OJPEGVSetField function in tif_ojpeg.c for libtiff 3.6.1 and earlier, when compiled with the OJPEG_SUPPORT (old JPEG support) option, allows remote attackers to execute arbitrary code via a malformed TIFF image.

• http://www.idefense.com/application/poi/display?id=154&type=vulnerabilitiesPatch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/129910US Government Resource
• http://www.novell.com/linux/security/advisories/2004_38_libtiff.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17843
• http://www.idefense.com/application/poi/display?id=154&type=vulnerabilitiesPatch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/129910US Government Resource
• http://www.novell.com/linux/security/advisories/2004_38_libtiff.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17843

Published

Jan 27, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-0923CUPS 1.1.20 and earlier records authentication information f…
• CVE-2004-0924NetInfo Manager on Mac OS X 10.3.x through 10.3.5, after an …
• CVE-2004-0925Postfix on Mac OS X 10.3.x through 10.3.5, with SMTPD AUTH e…
• CVE-2004-0926Heap-based buffer overflow in Apple QuickTime on Mac OS 10.2…
• CVE-2004-0927ServerAdmin in Mac OS X 10.2.8 through 10.3.5 uses the same …
• CVE-2004-0928The Microsoft IIS Connector in JRun 4.0 and Macromedia ColdF…
• CVE-2004-0930The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibl…
• CVE-2004-0931MySQL MaxDB before 7.5.00.18 allows remote attackers to caus…
• CVE-2004-0932McAfee Anti-Virus Engine DATS drivers before 4398 released o…
• CVE-2004-0933Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r…
• CVE-2004-0934Kaspersky 3.x to 4.x allows remote attackers to bypass antiv…
• CVE-2004-0935Eset Anti-Virus before 1.020 (16th September 2004) allows re…