Stack-based buffer overflow in the t2pwritepdf_page function in tiff2pdf in libtiff before 4.0.3 allows remote attackers to cause a denial of service (application crash) via a crafted image length and resolution in a TIFF image file.
{
"binaries": [
{
"binary_version": "4.0.2-4ubuntu3",
"binary_name": "libtiff-opengl"
},
{
"binary_version": "4.0.2-4ubuntu3",
"binary_name": "libtiff-tools"
},
{
"binary_version": "4.0.2-4ubuntu3",
"binary_name": "libtiff5"
},
{
"binary_version": "4.0.2-4ubuntu3",
"binary_name": "libtiff5-alt-dev"
},
{
"binary_version": "4.0.2-4ubuntu3",
"binary_name": "libtiff5-dev"
},
{
"binary_version": "4.0.2-4ubuntu3",
"binary_name": "libtiffxx5"
}
],
"availability": "No subscription required"
}