CVE-2016-3620

CVE-2016-3620 affects LibTIFF’s bmp2tiff tool: the ZIPEncode function in tif_zip.c (v4.0.6 and earlier) can be triggered by a crafted BMP image to cause a denial of service via a buffer over-read. Multiple connected sources confirm the issue and list the same vulnerable version range. Remediation...

CVE-2006-2024

Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a TIFF image that triggers errors in 1 the TIFFFetchAnyArray function in a tifdirread.c; 2 certain "codec cleanup methods" in b tiflzw.c, c tifpixarlog.c, and d tifzip.c; 3 and...