CVE-2004-0803: apple mac_os_x

CVSS: 7.5v2.0HighModified

AliasesDEBIAN-CVE-2004-0803

Published 26-10-2004Last modified 08-08-2024

Vulnerability summary

CVE-2004-0803 is a high (CVSS 7.5) vulnerability in apple mac_os_x. EPSS estimates a 8.27% chance of exploitation in the next 30 days, higher than 94.8% of scored vulnerabilities.

Overall risk

32/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v2.0 (NVD)

EPSS score

8.27%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 4

DSA-567-1 RHSA-2004:577 RHSA-2005:021 RHSA-2005:354

Timeline

26-10-2004
PublishedVulnerability first disclosed.
08-08-2024
Last modifiedVulnerability information updated.

Description

Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.

CVSS metrics

1 score · 1 source · 1 version

v2.07.5

EPSS trend

Probability

8.27%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

0.00 pp

From 8.27% on 18-09-2026

18-09-202618-10-2026

EPSS score

8.27%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat4 products

Apple2 products

mac_os_x10.2 | 10.2.1 | 10.2.2 | 10.2.3 | 10.2.4 | 10.2.5 | 10.2.6 | 10.2.7 | 10.2.8 | 10.3 | 10.3.1 | 10.3.2 | 10.3.3 | 10.3.4 | 10.3.5 | 10.3.6
mac_os_x_server10.2 | 10.2.1 | 10.2.2 | 10.2.3 | 10.2.4 | 10.2.5 | 10.2.6 | 10.2.7 | 10.2.8 | 10.3 | 10.3.1 | 10.3.2 | 10.3.3 | 10.3.4 | 10.3.5 | 10.3.6

Debian1 product