CVE-2014-8130

The _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a
zero size, which allows remote attackers to cause a denial of service
(divide-by-zero error and application crash) via a crafted TIFF image that
is mishandled by the TIFFWriteScanline function in tif_write.c, as
demonstrated by tiffdither.

Bugs

• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776185&gt;
• <http://bugzilla.maptools.org/show_bug.cgi?id=2483&gt;