Stack-Based Buffer Overflow in Libnsgif Affects Image Processing Applications
CVE-2015-7505

8.8HIGH

Key Information:

Vendor

Netsurf-browser

Status
Libnsgif
Vendor
CVE Published:
18 February 2020

What is CVE-2015-7505?

A stack-based buffer overflow exists in the gif_next_LZW function in libnsgif.c of Libnsgif version 0.1.2. This vulnerability can be exploited by attackers who manipulate LZW streams within crafted GIF files. When affected applications process these specially crafted files, it could lead to application crashes or potentially allow the execution of arbitrary code. Users of Libnsgif should review and apply appropriate security measures to mitigate possible threats.

Affected Version(s)

Libnsgif 0.1.2

References

http://www.securityfocus.com/archive/1/archive/1/537128/1...
x_refsource_MISC
http://seclists.org/fulldisclosure/2015/Dec/70
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.