CVE-2004-0803: Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related t...

Security readout for executives and security teams

CVE-2004-0803 is an old but serious libtiff flaw. A malicious TIFF image could trigger memory corruption in run-length decoding and potentially let an attacker run code in software that opens or processes the file. Exposure is most likely on legacy systems, bundled products, or applications using libtiff 3.6.1 or earlier to parse TIFF files. File-upload pipelines, image converters, mail clients, desktop viewers, and document workflows are the main areas to check. Prioritize remediation where TIFF files are processed from customers, email, web uploads, or partners. This is not shown as actively exploited in the supplied evidence, but arbitrary code execution in file parsers can create material compromise risk. Mitigation focus: Identify all systems and products using libtiff 3.6.1 or earlier.; Apply the relevant vendor security update from your operating system or product supplier.; Restrict TIFF processing from untrusted uploads until patched..

Prepared

Jun 30, 2026, 02:24 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.