CVE-2015-8947: Buffer Overflow
Published Jul 19, 2016
·Updated
hb-ot-layout-gpos-table.hh in HarfBuzz before 1.0.5 allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via crafted data, a different vulnerability than CVE-2016-2052.
Affected Software
1 affected component
Harfbuzz Project Harfbuzz<=1.0.4
Event History
Jul 19, 2016
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-8947?
CVE-2015-8947 has a severity rating that suggests it can lead to denial of service conditions.
2
How do I fix CVE-2015-8947?
To fix CVE-2015-8947, upgrade HarfBuzz to version 1.0.5 or later.
3
What types of attacks can result from CVE-2015-8947?
CVE-2015-8947 can allow remote attackers to cause a buffer over-read, leading to potential denial of service.
4
Which versions of HarfBuzz are affected by CVE-2015-8947?
CVE-2015-8947 affects all versions of HarfBuzz prior to 1.0.5.
5
Is CVE-2015-8947 an exploitable vulnerability?
Yes, CVE-2015-8947 is considered exploitable as it allows attackers to create crafted data that can trigger the vulnerability.