Mandriva Linux Security Advisory MDKSA-2006-082 - Several bugs were discovered in libtiff that can lead to remote Denial of Service attacks. These bugs can only be triggered by a user using an application that uses libtiff to process malformed TIFF images.
38743c1428f91d9aad98232a65e3557b789b0391414f626ed5d12a340f17cfb7
Ubuntu Security Notice 277-1 - Tavis Ormandy and Andrey Kiselev discovered that libtiff did not sufficiently verify the validity of TIFF files. By tricking an user into opening a specially crafted TIFF file with any application that uses libtiff, an attacker could exploit this to crash the application or even execute arbitrary code with the application's privileges.
ba4e453f24970b3973ae9d131096186a83cba08cbb8ffdaef37aaeeff2993f3a