CVE-2015-8668
Publicada em · Atualizada em
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 14%
probabilidade de exploração
14%top 4% das CVEs
exploração observada
nãonenhuma fonte reporta
Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a large width field in a BMP image.
Produtos afetados
n/a · n/aReferências
http://packetstormsecurity.com/files/135080/libtiff-4.0.6-Heap-Overflow.htmlhttp://rhn.redhat.com/errata/RHSA-2016-1546.htmlhttp://rhn.redhat.com/errata/RHSA-2016-1547.htmlhttps://security.gentoo.org/glsa/201701-16http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.htmlhttp://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.htmlhttp://www.securityfocus.com/archive/1/537208/100/0/threaded