Some vulnerabilities have been reported in LibTIFF, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.

1) A vulnerability is caused due to a boundary error in the processing of "SubjectDistance" EXIF tags and can be exploited to cause a stack-based buffer overflow via a specially crafted TIFF image.

Successful exploitation allows execution of arbitrary code.

The vulnerability is reported in versions prior to 3.9.4 and confirmed in version 3.9.3.

2) A vulnerability is caused due to the "TIFFReadDirectory()" function in libtiff/tif_dirread.c not properly processing unknown tags, which can be exploited to cause a crash.

Solution
Update to version 3.9.4.

Provided and/or discovered by
Red Hat credits Dan Rosenberg, working with iDefense.
2) Reportedly Dan Rosenberg

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.remotesensing.org/libtiff/v3.9.4.html

Other references
Further details available to Secunia VIM customers

Technical Analysis
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers