CVE-2015-7507: High severity libnsbmp vulnerability
Published Feb 18, 2020
·Updated
libnsbmp.c in Libnsbmp 0.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds read) via a crafted color table to the (1) bmpdecodergb or (2) bmpdecoderle function.
Affected Software
1 affected component
Netsurf-browser Libnsbmp=0.1.2
Event History
Feb 18, 2020
CVE Published
via MITRE·06:03 PM
Data Sourced
via MITRE·06:03 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2015-7507?
CVE-2015-7507 is classified as a denial of service vulnerability which can potentially lead to application crashes.
2
How do I fix CVE-2015-7507?
To fix CVE-2015-7507, upgrade to a version of Libnsbmp that addresses the out-of-bounds read issue.
3
What specific functions are affected by CVE-2015-7507?
CVE-2015-7507 affects the bmp_decode_rgb and bmp_decode_rle functions in Libnsbmp 0.1.2.
4
Who is impacted by CVE-2015-7507?
Users of Libnsbmp version 0.1.2 are impacted by CVE-2015-7507 if they process crafted color tables.
5
What type of attack does CVE-2015-7507 involve?
CVE-2015-7507 involves a context-dependent denial of service attack resulting from an out-of-bounds read.