CVE-2015-7506

The gif_next_LZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted LZW stream in a GIF file.

Score

CVSS 3.1 6.5 Medium

Status

Modified - secalert@redhat.com

Published

2020-02-18

Last modified

2024-08-06

Weaknesses

CWE-125

Affected products

• Libnsgif (Libnsgif)
• Libnsgif (Netsurf-browser)

References

• http://seclists.org/fulldisclosure/2015/Dec/70