CVE-2004-0803: Apple Mac OS X

High severity, CVSS 7.5. EPSS: 8.3% chance of exploitation in the next 30 days.

Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.

Affected products

• Apple Mac OS X: version 10.2 only; version 10.2.1 only; version 10.2.2 only; version 10.2.3 only; version 10.2.4 only; version 10.2.5 only; …
• Apple Mac OS X Server: version 10.2 only; version 10.2.1 only; version 10.2.2 only; version 10.2.3 only; version 10.2.4 only; version 10.2.5 only; …
• Kde Kde: version 3.2 only; version 3.2.1 only; version 3.2.2 only; version 3.2.3 only; version 3.3 only; version 3.3.1 only
• Libtiff Libtiff: version 3.4 only; version 3.5.1 only; version 3.5.2 only; version 3.5.3 only; version 3.5.4 only; version 3.5.5 only; …
• Mandrakesoft Mandrake Linux: version 10.0 only
• Pdflib PDF Library: version 5.0.2 only
• Red Hat Enterprise Linux: version 2.1 only; version 3.0 only
• Red Hat Enterprise Linux Desktop: version 3.0 only
• Red Hat Fedora Core: version core_2.0 only
• Red Hat Linux Advanced Workstation: version 2.1 only
• Suse Suse Linux: version 1.0 only; version 8 only; version 8.1 only; version 8.2 only; version 9.0 only; version 9.1 only
• Trustix Secure Linux: version 1.5 only; version 2.0 only; version 2.1 only
• WXGTK2 WXGTK2: version 2.5_.0 only

Published 2004-12-23. Last modified 2026-06-16.