CVE-2016-3623

Name of the Vulnerable Software and Affected Versions LibTIFF versions 4.0.6 and earlier

Description The issue allows remote attackers to cause a denial of service by setting certain parameters to 0. Specifically, this can be done by setting the v or h parameter to 0 in the rgb2ycbcr tool.

Recommendations For LibTIFF versions 4.0.6 and earlier, consider updating to a newer version to resolve the issue. As a temporary workaround, avoid using the v or h parameter with a value of 0 in the rgb2ycbcr tool until a patch is available.