CVE:CVE-2004-1307
CNNVD:CNNVD-200412-081
libtiff 3.6.1版本中tif_dirread.c的TIFFFetchStripThing函数存在整数溢出漏洞。远程攻击者借助一个带有STRIPOFFSETS标志和大量strips的TIFF文件执行任意代码，引发分配零字节缓冲区，并导致基于堆的缓冲区溢出。
solution:Upgrade avaya call_management_system_server to a higher version than 8.0,9.0,11.0,12.0,13.0,and avoid the version 8.0,9.0,11.0,12.0,13.0; Upgrade avaya cvlan to a higher version than *; Upgrade avaya integrated_management to a higher version than *; Upgrade avaya interactive_response to a higher version than *,1.2.1,1.3,and avoid the version 1.2.1,1.3; Upgrade avaya intuity_audix_lx to a higher version than *; Upgrade f5 icontrol_service_manager to a higher version than 1.3,1.3.4,1.3.5,1.3.6,and avoid the version 1.3,1.3.4,1.3.5,1.3.6; Upgrade libtiff libtiff to a higher version than 3.4,3.5.1,3.5.2,3.5.3,3.5.4,3.5.5,3.5.7,3.6.0,3.6.1,3.7.0,and avoid the version 3.4,3.5.1,3.5.2,3.5.3,3.5.4,3.5.5,3.5.7,3.6.0,3.6.1,3.7.0; Upgrade sgi propack to a higher version than 3.0,and avoid the version 3.0; Upgrade conectiva linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade avaya mn100 to a higher version than *; Upgrade apple mac_os_x to a higher version than 10.3,10.3.1,10.3.2,10.3.3,10.3.4,10.3.5,10.3.6,10.3.7,10.3.8,10.3.9,and avoid the version 10.3,10.3.1,10.3.2,10.3.3,10.3.4,10.3.5,10.3.6,10.3.7,10.3.8,10.3.9; Upgrade apple mac_os_x_server to a higher version than 10.3,10.3.1,10.3.2,10.3.3,10.3.4,10.3.5,10.3.6,10.3.7,10.3.8,10.3.9,and avoid the version 10.3,10.3.1,10.3.2,10.3.3,10.3.4,10.3.5,10.3.6,10.3.7,10.3.8,10.3.9; Upgrade avaya modular_messaging_message_storage_server to a higher version than 1.1,2.0,and avoid the version 1.1,2.0; Upgrade gentoo linux to a higher version than *; Upgrade mandrakesoft mandrake_linux to a higher version than 10.0,10.1,and avoid the version 10.0,10.1; Upgrade mandrakesoft mandrake_linux_corporate_server to a higher version than 3.0,and avoid the version 3.0; Upgrade sco unixware to a higher version than 7.1.4,and avoid the version 7.1.4; Upgrade sun solaris to a higher version than 7.0,8.0,9.0,9.0:x86_update_2,10.0,and avoid the version 7.0,8.0,9.0,9.0:x86_update_2,10.0; Upgrade sun sunos to a higher version than 5.7,5.8,and avoid the version 5.7,5.8