Vulnerability in tif_dirread.c for libtiff allows remote attackers to cause a denial of service (application crash) via a TIFF image that causes a divide-by-zero error when the number of row bytes is zero, a different vulnerability than CVE-2005-2452.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade tiff | Jul 30, 2024 | Nov 3, 2004 |
| Freebsd | — | Upgrade tiffUpgrade ivtoolsUpgrade linux-tiffUpgrade ja-libimgUpgrade pdflib-perlUpgrade gdalUpgrade paraviewUpgrade fractoramaUpgrade pdflibUpgrade ivUpgrade ja-iv | Dec 10, 2025 | Jan 18, 2005 |
| Gentoo Linux | — | Upgrade media-libs/pdflib.Upgrade kde-base/kdegraphics. | Oct 30, 2017 | Nov 3, 2004 |
| Suse | — | Upgrade libtiff-32bitUpgrade libtiffUpgrade libtiff-x86Upgrade libtiff-64bitUpgrade kdegraphics3-fax | Feb 17, 2015 | Nov 3, 2004 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub