Stack-based buffer overflow in the _TIFFVGetField function in tif_dir.c in LibTIFF 4.0.0alpha4 4.0.0alpha5 4.0.0alpha6 4.0.0beta7 4.0.0 4.0.1 4.0.2 4.0.3 4.0.4 4.0.4beta 4.0.5 4.0.6 4.0.7 and 4.0.8 allows remote attackers to cause a denial of service (crash) via a crafted TIFF file.