Herve Drolon has reported a vulnerability in LibTIFF, which can be exploited by malicious people to crash certain applications on a user's system.

The vulnerability is caused due to a NULL pointer dereferencing error in tif_dir.c. This can be exploited to crash an application linked against LibTIFF when a specially crafted TIFF image is processed.

The vulnerability has been confirmed in version 3.8.0. Other versions may also be affected.

Solution
The vendor has supplied a patch for this vulnerability. However, it is still possible to cause an application to crash via certain crafted TIFF images.

Provided and/or discovered by
Herve Drolon

Changelog
Further details available in Customer Area

Original Advisory
http://bugzilla.remotesensing.org/show_bug.cgi?id=1029
http://bugzilla.remotesensing.org/show_bug.cgi?id=1034

Deep Links
Links available in Customer Area