CVE-2015-7505: Buffer Overflow

Published Feb 18, 2020

Updated

Stack-based buffer overflow in the gifnextLZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted LZW stream in a GIF file.

Affected Software

1 affected component

Netsurf-browser Libnsgif=0.1.2

Event History

Feb 18, 2020

CVE Published

via MITRE·05:45 PM

Data Sourced

via MITRE·05:45 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2015-7505?

CVE-2015-7505 is classified as a medium severity vulnerability due to its potential to cause application crashes and possible arbitrary code execution.

How do I fix CVE-2015-7505?

To fix CVE-2015-7505, update to a version of Libnsgif newer than 0.1.2 that addresses this buffer overflow issue.

What systems are affected by CVE-2015-7505?

CVE-2015-7505 specifically affects Libnsgif version 0.1.2 as used in the NetSurf Browser.

What type of attack is possible with CVE-2015-7505?

CVE-2015-7505 allows context-dependent attackers to execute a denial of service attack or potentially execute arbitrary code via a crafted GIF file.

Is CVE-2015-7505 exploitable remotely?

Yes, CVE-2015-7505 can be exploited remotely through maliciously crafted LZW streams in GIF files.