CVE-2017-17095
tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (TIFFSetupStrips heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted TIFF file.
Source: CVE-2017-17095