DLF Fall Forum
Baltimore, October 25-27, 2004
23
Invalid Component Definition
•TIFF strip definition
Combination of starting offset and
length defines a strip that extends
beyond the physical size of the file
–Visual corruption
–Potential buffer overflow security hole
•C.f. the recent MSIE JPEG buffer overflow exploit
(US-CERT TA04-260A)
•Vendor tools include: ScanFix, Enhanced Pixel Translations Inc., PIXTIFF Version 54.2.210