CVE-2004-0886
EPSS 11.0%
Description
Multiple integer overflows in libtiff 3.6.1 and earlier allow remote attackers to cause a denial of service (crash or memory corruption) via TIFF images that lead to incorrect malloc calls.
How to fix CVE-2004-0886
To remediate CVE-2004-0886, upgrade the affected package to a fixed version below.
- Debian/tiff—upgrade to 3.6.1-2 or later
Is CVE-2004-0886 being exploited?
Moderate — EPSS is 11.0%. Track this CVE but it's not at the top of the prioritisation list.
Affected packages (1)
- from 0, < 3.6.1-2