Remote Yes

Type Denial of service

Description

A security issue has been found in libtiff < 4.0.7, where a crafted tiff image can cause a memory leak in OJPEGReadHeaderInfoSecTablesAcTable().

AVG-817 lib32-libtiff 4.0.7-2 4.0.7-3 Medium Fixed

AVG-237 libtiff 4.0.7-2 4.0.7-3 Medium Fixed

28 Apr 2017 ASA-201704-10 AVG-237 libtiff Medium multiple issues

https://github.com/vadz/libtiff/commit/8283e4d1b7e53340684d12932880cbcbaf23a8c1
http://bugzilla.maptools.org/show_bug.cgi?id=2659
http://seclists.org/oss-sec/2017/q2/37