CVE-2004-1308

Integer overflow in (1) tif_dirread.c and (2) tif_fax3.c for libtiff 3.5.7 and 3.7.0 allows remote attackers to execute arbitrary code via a TIFF file containing a TIFF_ASCII or TIFF_UNDEFINED directory entry with a -1 entry count, which leads to a heap-based buffer overflow.

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000920
• http://lists.apple.com/archives/security-announce/2005/May/msg00001.html
• http://secunia.com/advisories/13776
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-101677-1
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-201072-1
• http://www.debian.org/security/2004/dsa-617
• http://www.idefense.com/application/poi/display?id=174&type=vulnerabilitiesExploit, Patch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/125598US Government Resource
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:052
• http://www.novell.com/linux/security/advisories/2005_01_libtiff_tiff.html
• http://www.redhat.com/support/errata/RHSA-2005-019.html
• http://www.redhat.com/support/errata/RHSA-2005-035.html
• http://www.us-cert.gov/cas/techalerts/TA05-136A.htmlUS Government Resource
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18637
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100117
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9392
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000920
• http://lists.apple.com/archives/security-announce/2005/May/msg00001.html
• http://secunia.com/advisories/13776
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-101677-1
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-201072-1
• http://www.debian.org/security/2004/dsa-617
• http://www.idefense.com/application/poi/display?id=174&type=vulnerabilitiesExploit, Patch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/125598US Government Resource
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:052
• http://www.novell.com/linux/security/advisories/2005_01_libtiff_tiff.html
• http://www.redhat.com/support/errata/RHSA-2005-019.html
• http://www.redhat.com/support/errata/RHSA-2005-035.html
• http://www.us-cert.gov/cas/techalerts/TA05-136A.htmlUS Government Resource
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18637
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100117
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9392

Published

Jan 10, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-1302The id3tag_sort function in id3tag.c for YAMT 0.5 allows rem…
• CVE-2004-1303Buffer overflow in the get function in get.c for Yanf 0.4 al…
• CVE-2004-1304Stack-based buffer overflow in the ELF header parsing code i…
• CVE-2004-1305The Windows Animated Cursor (ANI) capability in Windows NT, …
• CVE-2004-1306Heap-based buffer overflow in winhlp32.exe in Windows NT, Wi…
• CVE-2004-1307Integer overflow in the TIFFFetchStripThing function in tif_…
• CVE-2004-1309Heap-based buffer overflow in the demux_open_bmp function in…
• CVE-2004-1310Stack-based buffer overflow in the asf_mmst_streaming.c func…
• CVE-2004-1311Integer overflow in the real_setup_and_get_header function i…
• CVE-2004-1312A bug in the HTML parser in a certain Microsoft HTML library…
• CVE-2004-1313The Smc.exe process in My Firewall Plus 5.0 build 1117, and …
• CVE-2004-1314Safari 1.x allows remote attackers to spoof arbitrary web si…