CVE-2015-7508: Buffer Overflow
Published Feb 12, 2020
·Updated
Heap-based buffer overflow in the bmpdecoderle function in libnsbmp.c in Libnsbmp 0.1.2 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via the last row of RLE data in a crafted BMP file.
Affected Software
1 affected component
Netsurf-browser Libnsbmp=0.1.2
Event History
Feb 12, 2020
CVE Published
via MITRE·02:37 AM
Data Sourced
via MITRE·02:37 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2015-7508.
2
What is the severity of CVE-2015-7508?
The severity of CVE-2015-7508 is high, with a severity value of 8.8.
3
What is the affected software?
The affected software is Libnsbmp version 0.1.2.
4
What is the impact of CVE-2015-7508?
The vulnerability can allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted BMP file.
5
Are there any references for CVE-2015-7508?
Yes, there are references available at http://seclists.org/fulldisclosure/2015/Dec/73 and http://www.securityfocus.com/archive/1/archive/1/537132/100/0/threaded.