CVE-2004-1307: Apple Mac OS X

High severity, CVSS 7.5. EPSS: 6.3% chance of exploitation in the next 30 days.

Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overflow.

Affected products

• Apple Mac OS X: version 10.3 only; version 10.3.1 only; version 10.3.2 only; version 10.3.3 only; version 10.3.4 only; version 10.3.5 only; …
• Apple Mac OS X Server: version 10.3 only; version 10.3.1 only; version 10.3.2 only; version 10.3.3 only; version 10.3.4 only; version 10.3.5 only; …
• Avaya Call Management System Server: version 8.0 only; version 9.0 only; version 11.0 only; version 12.0 only; version 13.0 only
• Avaya Cvlan: any version
• Avaya Integrated Management: any version
• Avaya Interactive Response: any version; version 1.2.1 only; version 1.3 only
• Avaya Intuity Audix Lx: any version
• Avaya MN100: any version
• Avaya Modular Messaging Message Storage Server: version 1.1 only; version 2.0 only
• Conectiva Linux: version 9.0 only; version 10.0 only
• F5 Icontrol Service Manager: version 1.3 only; version 1.3.4 only; version 1.3.5 only; version 1.3.6 only
• Gentoo Linux: any version
• Libtiff Libtiff: version 3.4 only; version 3.5.1 only; version 3.5.2 only; version 3.5.3 only; version 3.5.4 only; version 3.5.5 only; …
• Mandrakesoft Mandrake Linux: version 10.0 only; version 10.1 only
• Mandrakesoft Mandrake Linux Corporate Server: version 3.0 only
• Sco Unixware: version 7.1.4 only
• Sgi Propack: version 3.0 only
• Sun Solaris: version 7.0 only; version 8.0 only; version 9.0 only; version 10.0 only
• Sun Sunos: version 5.7 only; version 5.8 only

Published 2004-12-21. Last modified 2026-06-16.