You need to log in before you can comment on or make changes to this bug.
Illegal read vulnerability has been reported in oss-security mailing list: http://www.openwall.com/lists/oss-security/2016/04/08/12 Affected Versions: <= 4.0.6 Vulnerability Type: Illegel read Credit: Kaixiang Zhang of the Cloud Security Team, Qihoo 360 Illegal read occurs in the TIFFWriteDirectoryTagLongLong8Array function in tif_dirwrite.c when using tiffset command, which allows attackers to exploit this issue to cause denial-of-service.
It would be great to attach the exploit file
Going through the open bugs in bugzilla make me think that this bug is a true duplicate of http://bugzilla.maptools.org/show_bug.cgi?id=2500 . Closing that one as #2500 has a reproducer attached *** This bug has been marked as a duplicate of bug 2500 ***
