CVE-2004-0803 Memory corruption in n/a
Remote attackers can execute arbitrary code by tricking users into opening malicious TIFF files processed by the vulnerable libtiff library.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2004-0803?
CVE-2004-0803 is a high-severity memory corruption vulnerability in Apple Mac Os X, published on 26 Oct 2004. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.
Which versions are affected by CVE-2004-0803?
It affects 13 products.
Products include Apple Mac Os X, Apple Mac Os X Server, Kde Kde, Libtiff Libtiff, Mandrakesoft Mandrake Linux, Pdflib Pdf Library and 7 more.
How do I fix CVE-2004-0803?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2004-0803 being exploited?
There is no known exploitation of CVE-2004-0803 in the wild and no public exploit code.
Other vulnerabilities in Apple Mac Os X
Sources
Also known as DEBIAN-CVE-2004-0803, GHSA-wmr8-3pg7-vqqp.