tools/tiffcrop.c in libtiff 4.0.6 reads an undefined buffer in readContigStripsIntoBuffer() because of a uint16 integer overflow. Reported as MSVR 35100. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9538