CVE-2015-7506: Medium severity netsurf browser vulnerability
Published Feb 18, 2020
·Updated
The gifnextLZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted LZW stream in a GIF file.
Affected Software
1 affected component
Netsurf-browser Libnsgif=0.1.2
Event History
Feb 18, 2020
CVE Published
via MITRE·01:54 PM
Data Sourced
via MITRE·01:54 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2015-7506?
CVE-2015-7506 has been classified as a vulnerability that can lead to denial of service due to an out-of-bounds read.
2
How do I fix CVE-2015-7506?
To remediate CVE-2015-7506, it is recommended to update to a patched version of Libnsgif that addresses this vulnerability.
3
Which software is affected by CVE-2015-7506?
CVE-2015-7506 affects Libnsgif version 0.1.2 as used in Netsurf-browser.
4
What kind of attack is possible with CVE-2015-7506?
CVE-2015-7506 allows attackers to exploit crafted LZW streams in GIF files, causing application crashes.
5
Is CVE-2015-7506 a remote exploitation vulnerability?
Yes, CVE-2015-7506 can be exploited by remote attackers through specially crafted GIF files.