LibTIFF - 'td_stripbytecount' Null Pointer Dereference Remote Denial of Service

Author: Tomas Hoger
type: dos
platform: linux
port: 
date_added: 2010-08-07 
date_updated: 2010-08-07 
verified: 1 
codes: CVE-2010-2482;OSVDB-66083 
tags: 
aliases: lp589145-sample.tif.gz 
screenshot_url:  
application_url: 

From: https://www.securityfocus.com/bid/41480/
LibTIFF is prone to a denial-of-service vulnerability because it fails to properly validate user-supplied input.

An attacker can exploit this issue to crash an application that uses the vulnerable library, denying service to legitimate users. Due to the nature of this issue, attackers may be able to execute arbitrary code, but this has not been confirmed.

Versions up to and including libTIFF 3.9.4 are vulnerable.

PoC:
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/14573.tif.gz (lp589145-sample.tif.gz)