Related Vulnerabilities: CVE-2014-8127  

LibTIFF provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. It is composed of a library for working with TIFF files along with a small collection of tools for doing simple manipulations of TIFF images. Multiple out-of-bounds reads can be triggered with malformed TIFF images in the following LibTIFF tools: thumbnail, tiff2bw, tiff2rgba, tiff2ps, tiffdither, tiffmedian, tiffset

Severity Medium

Remote Yes

Type Information disclosure

Description

LibTIFF provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. It is composed of a library for working with TIFF files along with a small collection of tools for doing simple manipulations of TIFF images.
Multiple out-of-bounds reads can be triggered with malformed TIFF images in the following LibTIFF tools: thumbnail, tiff2bw, tiff2rgba, tiff2ps, tiffdither, tiffmedian, tiffset

AVG-86 lib32-libtiff 4.0.6-2 4.0.7-1 Critical Fixed

AVG-85 libtiff 4.0.6-2 4.0.7-1 Critical Fixed

25 Nov 2016 ASA-201611-27 AVG-86 lib32-libtiff Critical multiple issues

25 Nov 2016 ASA-201611-26 AVG-85 libtiff Critical multiple issues

http://www.conostix.com/pub/adv/CVE-2014-8127-LibTIFF-Out-of-bounds_Reads.txt