PT-2020-7894 · Libnsbmp · Libnsbmp

Hans Jerry Illikainen · Published 2020-02-12 · Updated 2020-02-14 · CVE-2015-7508

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Libnsbmp version 0.1.2

Description: The issue is related to a heap-based buffer overflow in the bmp decode rle function in libnsbmp.c. This allows context-dependent attackers to cause a denial of service, potentially leading to an application crash, or possibly execute arbitrary code. The attack vector involves the last row of RLE data in a crafted BMP file.

Recommendations: For Libnsbmp version 0.1.2, consider disabling the bmp decode rle function until a patch is available to prevent potential exploitation. Restrict access to crafted BMP files to minimize the risk of denial of service or arbitrary code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2015-7508

Affected Products

Libnsbmp

References · 7

• 🔥 http://seclists.org/fulldisclosure/2015/Dec/73 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-7508 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-7508 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2015-7508 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2015-7508 · Vendor Advisory
• https://t.me/cvenotify/908 · Telegram Post
• http://securityfocus.com/archive/1/archive/1/537132/100/0/threaded · Note