Heap-based Buffer Overflow in Libnsbmp Affects Multiple Applications
CVE-2015-7508

8.8HIGH

Key Information:

Vendor

Netsurf-browser

Status
Libnsbmp
Vendor
CVE Published:
12 February 2020

What is CVE-2015-7508?

A heap-based buffer overflow exists in the bmp_decode_rle function in libnsbmp.c of Libnsbmp version 0.1.2. This vulnerability enables context-dependent attackers to craft specific BMP files that can manipulate the last row of RLE data. When processed, these BMP files can lead to application crashes, potentially causing denial of service or the execution of arbitrary code. This poses significant risks to systems using affected versions of Libnsbmp as attackers could exploit this weakness to disrupt services or gain unauthorized control.

Affected Version(s)

Libnsbmp 0.1.2

References

http://www.securityfocus.com/archive/1/archive/1/537132/1...
x_refsource_MISC
http://seclists.org/fulldisclosure/2015/Dec/73
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.