iDEFENSE Security Advisory 10.22.04 – An exploitable heap overflow in the handling of malformed tiff files has been discovered in the latest version of libtiff when JPEG support has been enabled. An attacker can exploit the above-described vulnerability to execute arbitrary code under the permissions of the target user. Successful exploitation requires that the attacker convince the end-user to open the malicious tiff file using an application linked with a vulnerable version of libtiff.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/34815/10.22.04.txt
Source: https://packetstormsecurity.com/files/34815/iDEFENSE-Security-Advisory-2004-10-22.t.html