Arbitrary Code Execution

libtiff is vulnerable to arbitrary code execution. The vulnerability exists through a stack-based buffer overflow in the tiffsplit command in libtiff 3.8.2 and earlier might might allow attackers to execute arbitrary code via a long filename. NOTE: tiffsplit is not setuid. If there is not a commo...