CVE-2016-10094

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.0.7

Description The issue is caused by an off-by-one error in the t2p readwrite pdf image tile function in tools/tiff2pdf.c. This error allows remote attackers to have an unspecified impact via a crafted image.

Recommendations For LibTIFF version 4.0.7, consider disabling the t2p readwrite pdf image tile function until a patch is available to prevent potential exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.