CVE ID:	CVE-2018-7456
Description:	A NULL Pointer Dereference occurs in the function TIFFPrintDirectory in tif_print.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 when using the tiffinfo tool to print crafted TIFF information, a different vulnerability than CVE-2017-18013. (This affects an earlier part of the TIFFPrintDirectory function that was not addressed by the CVE-2017-18013 patch.)
Test IDs:	1.3.6.1.4.1.25623.1.1.2.2019.2244   1.3.6.1.4.1.25623.1.1.2.2019.2133   1.3.6.1.4.1.25623.1.1.10.2018.0208   1.3.6.1.4.1.25623.1.0.891346   1.3.6.1.4.1.25623.1.0.891411   1.3.6.1.4.1.25623.1.0.891347
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2018-7456 Debian Security Information: DSA-4349 (Google Search) https://www.debian.org/security/2018/dsa-4349 http://bugzilla.maptools.org/show_bug.cgi?id=2778 https://github.com/xiaoqx/pocs/tree/master/libtiff https://lists.debian.org/debian-lts-announce/2018/04/msg00010.html https://lists.debian.org/debian-lts-announce/2018/04/msg00011.html https://lists.debian.org/debian-lts-announce/2018/07/msg00002.html RedHat Security Advisories: RHSA-2019:2051 https://access.redhat.com/errata/RHSA-2019:2051 RedHat Security Advisories: RHSA-2019:2053 https://access.redhat.com/errata/RHSA-2019:2053 https://usn.ubuntu.com/3864-1/