CVE-2016-3619

Name of the Vulnerable Software and Affected Versions LibTIFF versions 4.0.6 and earlier

Description The issue allows remote attackers to cause a denial of service via a crafted BMP image when the "-c none" option is used with the DumpModeEncode function in the bmp2tiff tool.

Recommendations For LibTIFF versions 4.0.6 and earlier, as a temporary workaround, consider avoiding the use of the "-c none" option with the bmp2tiff tool until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.