Debian Security Advisory DSA 1078-1 (tiff)

The remote host is missing an update to tiff announced via advisory DSA 1078-1. Andrey Kiselev discovered a problem in the TIFF library that may allow an attacker with a specially crafted TIFF image with Yr/Yg/Yb values that exceed the YCR/YCG/YCB values to crash the library and hence the...

DSA-1078-1 tiff - out-of-bounds read

Bulletin has no description...

Out-of-bounds

The TIFFToRGB function in libtiff before 3.8.1 allows remote attackers to cause a denial of service crash via a crafted TIFF image with Yr/Yg/Yb values that exceed the YCR/YCG/YCB values, which triggers an out-of-bounds read...