CVE-2015-8668: Buffer Overflow
Heap-based buffer overflow in the PackBitsPreEncode function in tifpackbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a large width field in a BMP image.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8668?
CVE-2015-8668 has a high severity rating due to the potential for remote attackers to execute arbitrary code or cause a denial of service.
How do I fix CVE-2015-8668?
To fix CVE-2015-8668, update to a version of libtiff that is higher than 4.0.6 where the vulnerability has been patched.
What software is affected by CVE-2015-8668?
CVE-2015-8668 affects libtiff version 4.0.6 and earlier, along with certain versions of Oracle VM Server and Red Hat Enterprise Linux.
What attack vectors are associated with CVE-2015-8668?
Attackers can exploit CVE-2015-8668 through specially crafted BMP images that contain a large width field.
Can CVE-2015-8668 lead to data leakage?
Yes, CVE-2015-8668 can potentially lead to data leakage by allowing remote code execution.