XnSoft NConvert Use-After-Free Vulnerability in TIFF File Processing

A use-after-free vulnerability has been identified in XnSoft NConvert version 7.230. This issue arises when the application processes a crafted TIFF file, leading to a potential denial-of-service condition.

Impact

Exploitation of this vulnerability causes a denial-of-service condition, where the application may crash or become unresponsive.

Reproduction

The vulnerability can be reproduced by using the command-line option '-out tiff' with a crafted TIFF file named 'id_000002_00'. This command will trigger the use-after-free condition while processing the file.