CVE-2015-8665

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.0.6

Description The issue is caused by a buffer overflow in the tif getimage.c file of the LibTIFF library. It can be exploited by a remote attacker to cause a denial of service, specifically an out-of-bounds read, by using the SamplesPerPixel tag in a TIFF image.

Recommendations For LibTIFF version 4.0.6, consider restricting the use of the tif getimage.c function until a patch is available, or avoid using the SamplesPerPixel tag in TIFF images to minimize the risk of exploitation.