--- tiff-3.8.2/tools/tiff2pdf.c.CVE-2006-2193 2006-03-21 17:42:51.000000000 +0100 +++ tiff-3.8.2/tools/tiff2pdf.c 2006-09-05 10:47:51.000000000 +0200 @@ -3668,7 +3668,7 @@ written += TIFFWriteFile(output, (tdata_t) "(", 1); for (i=0;i<len;i++){ if((pdfstr[i]&0x80) || (pdfstr[i]==127) || (pdfstr[i]<32)){ - sprintf(buffer, "\\%.3o", pdfstr[i]); + snprintf(buffer, sizeof(buffer), "\\%.3o", (unsigned char) pdfstr[i]); written += TIFFWriteFile(output, (tdata_t) buffer, 4); } else { switch (pdfstr[i]){