CVE-2015-8837

High

Published: 30/03/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A stack-based buffer overflow in the isofs_real_readdir function in isofs.c in FuseISO 20070708 can be exploited by remote attackers. They can cause application crashes or potentially execute arbitrary code by sending a long pathname in an ISO file.

Risk Assessment

This vulnerability can lead to application crashes, affecting service availability. There is also a risk of arbitrary code execution, which can result in serious security breaches.

Recommendation

It is recommended to update FuseISO to the latest version to mitigate this vulnerability. Additionally, monitoring and restricting access to systems that may be exposed to attacks exploiting this flaw is advised.

Other vulnerabilities in FuseISO 20070708

CVE-2015-8836High
Integer overflow in the isofs_real_read_zf function in isofs.c in FuseISO 20070708 might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a large ZF block size in an ISO file, leading to a heap-based buffer overflow.

Original NVD description (English source)

Stack-based buffer overflow in the isofs_real_readdir function in isofs.c in FuseISO 20070708 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long pathname in an ISO file.