CVE-2015-8668

Critical

Published: 08/01/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in libtiff version 4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a large width field in a BMP image.

Risk Assessment

Attackers can exploit this vulnerability to execute arbitrary code remotely, potentially leading to serious security and service availability issues.

Recommendation

It is recommended to update libtiff to version 4.0.6 or later to mitigate this vulnerability and to monitor systems for unauthorized activities.

Original NVD description (English source)

Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a large width field in a BMP image.