Unscored CVE-2004-0929 EUVD-2004-0927GHSA-jf9r-74qm-gqm9

Heap-based buffer overflow in the OJPEGVSetField function in tif_ojpeg.c for libtiff 3.6.1 and earlier, when compiled with the OJPEG_SUPPOR…

Published Oct 26, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

Heap-based buffer overflow in the OJPEGVSetField function in tif_ojpeg.c for libtiff 3.6.1 and earlier, when compiled with the OJPEG_SUPPORT (old JPEG support) option, allows remote attackers to execute arbitrary code via a malformed TIFF image.

References

20041022 Novell SuSe Linux LibTIFF Heap Overflow Vulnerability third-party-advisory
SUSE-SA:2004:038 vendor-advisory
libtiff-ojpegvsetfield-bo(17843) vdb-entry
VU#129910 third-party-advisory