CVE-2015-8221: Buffer Overflow
Published Nov 17, 2015
·Updated
Integer overflow in Google Picasa before 3.9.140 Build 259 allows remote attackers to execute arbitrary code via the CAMF section in a FOVb image, which triggers a heap-based buffer overflow.
Affected Software
1 affected component
Google Picasa<=3.9.140
Event History
Nov 17, 2015
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-8221?
The severity of CVE-2015-8221 is categorized as critical due to the potential for arbitrary code execution.
2
How do I fix CVE-2015-8221?
To fix CVE-2015-8221, upgrade Google Picasa to version 3.9.140 or later.
3
What kind of attacks can exploit CVE-2015-8221?
CVE-2015-8221 can be exploited by remote attackers using specially crafted FOVb images to trigger a buffer overflow.
4
Which versions of Picasa are affected by CVE-2015-8221?
Versions of Google Picasa before 3.9.140 are affected by CVE-2015-8221.
5
What is the impact of CVE-2015-8221?
The impact of CVE-2015-8221 includes the potential for attackers to execute arbitrary code on the victim's system.