CVE-2004-0804: Libtiff

Medium severity, CVSS 4.3. EPSS: 4.3% chance of exploitation in the next 30 days.

Vulnerability in tif_dirread.c for libtiff allows remote attackers to cause a denial of service (application crash) via a TIFF image that causes a divide-by-zero error when the number of row bytes is zero, a different vulnerability than CVE-2005-2452.

Affected products

• Libtiff Libtiff: before 3.7.0 (fixed in 3.7.0)

Published 2004-11-03. Last modified 2026-06-16.