CVE-2004-0804: libtiff Divide By Zero

EPSS trend

Probability

4.33%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

0.00 pp

From 4.33% on 20-09-2026

20-09-202620-10-2026

EPSS score

4.33%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

17 links

www.redhat.com/support/errata/RHSA-2004-577.htmlVendor AdvisoryX Refsource REDHATPatch
www.mandriva.com/security/advisories?name=MDKSA-2004:109Vendor AdvisoryX Refsource MANDRAKEBroken Link
www.redhat.com/support/errata/RHSA-2005-021.htmlVendor AdvisoryX Refsource REDHATNot Applicable
sunsolve.sun.com/search/document.do?assetkey=1-66-201072-1Vendor AdvisoryX Refsource SUNALERTBroken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100115VDB EntrySignatureX Refsource OVALTool Signature
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11711VDB EntrySignatureX Refsource OVALTool Signature
sunsolve.sun.com/search/document.do?assetkey=1-26-101677-1Vendor AdvisoryX Refsource SUNALERTBroken Link
www.novell.com/linux/security/advisories/2004_38_libtiff.htmlVendor AdvisoryX Refsource SUSEBroken Link
distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000888Vendor AdvisoryX Refsource CONECTIVABroken Link
www.mandriva.com/security/advisories?name=MDKSA-2005:052Vendor AdvisoryX Refsource MANDRAKEBroken Link

Show all 17 references

www.kde.org/info/security/advisory-20041209-2.txtX Refsource CONFIRMThird Party Advisory
www.kb.cert.org/vuls/id/555304Third Party AdvisoryX Refsource CERT VNUS Government Resource
www.redhat.com/support/errata/RHSA-2005-354.htmlVendor AdvisoryX Refsource REDHATNot Applicable
www.debian.org/security/2004/dsa-567Vendor AdvisoryX Refsource DEBIAN
exchange.xforce.ibmcloud.com/vulnerabilities/17755VDB EntryX Refsource XFThird Party Advisory
bugzilla.remotesensing.org/show_bug.cgi?id=111X Refsource MISCIssue Tracking
security-tracker.debian.org/tracker/CVE-2004-0804Advisory

Related vulnerabilities

CVE-2018-5360debiantiff+31.82%8y ago14-01-2018 02:00LibTIFF before 4.0.6 mishandles the reading of TIFF files, as demonstrated by a heap-based buffer over-read in the ReadTIFFImage function in coders/tiff.c in GraphicsMagick 1.3.27.CVE-2018-10963alpinetiff+53.64%8y ago10-05-2018 02:00The TIFFWriteDirectorySec() function in tif_dirwrite.c in LibTIFF through 4.0.9 allows remote attackers to cause a denial of service (assertion failure and application crash) via a crafted file, a different vulnerability than CVE-2017-13726.CVE-2013-4231debiantiff+27.40%12y ago19-01-2014 15:00Multiple buffer overflows in libtiff before 4.0.3 allow remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1) extension block in a GIF image or (2) GIF raster image to tools/gif2tiff.c or (3) a long filename for a TIFF image to tools/rgb2ycbcr.c. NOTE: vectors 1 and 3 are disputed by Red Hat, which states that the input cannot exceed the allocated buffer size.CVE-2013-4243debiantiff+57.17%13y ago10-09-2013 19:00Heap-based buffer overflow in the readgifimage function in the gif2tiff tool in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted height and width values in a GIF image.CVE-2013-4232debiantiff+35.02%13y ago10-09-2013 19:00Use-after-free vulnerability in the t2p_readwrite_pdf_image function in tools/tiff2pdf.c in libtiff 4.0.3 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted TIFF image.CVE-2013-4244debiantiff+42.70%13y ago28-09-2013 19:00The LZW decompressor in the gif2tiff tool in libtiff 4.0.3 and earlier allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a crafted GIF image.

All vulnerabilities inlibtiff

CVE-2004-0804: libtiff Divide By Zero

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References