Vulnerability Description
Integer overflow in tools/bmp2tiff.c in LibTIFF before 4.0.4 allows remote attackers to cause a denial of service (heap-based buffer over-read), or possibly obtain sensitive information from process memory, via crafted width and length values in RLE4 or RLE8 data in a BMP file.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Libtiff | Libtiff | <= 4.0.3 |
Related Weaknesses (CWE)
References
- http://download.osgeo.org/libtiff/tiff-4.0.4.tar.gzPatch
- http://rhn.redhat.com/errata/RHSA-2017-0225.html
- http://www.floyd.ch/?p=874BMPThird Party Advisory
- http://www.securityfocus.com/bid/94717
- http://download.osgeo.org/libtiff/tiff-4.0.4.tar.gzPatch
- http://rhn.redhat.com/errata/RHSA-2017-0225.html
- http://www.floyd.ch/?p=874BMPThird Party Advisory
- http://www.securityfocus.com/bid/94717
FAQ
What is CVE-2015-8870?
CVE-2015-8870 is a vulnerability with a CVSS score of 7.4 (HIGH). Integer overflow in tools/bmp2tiff.c in LibTIFF before 4.0.4 allows remote attackers to cause a denial of service (heap-based buffer over-read), or possibly obtain sensitive information from process m...
How severe is CVE-2015-8870?
CVE-2015-8870 has been rated HIGH with a CVSS base score of 7.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-8870?
Check the references section above for vendor advisories and patch information. Affected products include: Libtiff Libtiff.