CVE-2015-8668

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a large width field in a BMP image.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/135080/libtiff-4.0.6-Heap-Overflow.htmlExploit, Third Party Advisory, VDB Entry
http://rhn.redhat.com/errata/RHSA-2016-1546.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-1547.htmlThird Party Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.htmlThird Party Advisory
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.htmlThird Party Advisory
http://www.securityfocus.com/archive/1/537208/100/0/threadedBroken Link, VDB Entry
https://security.gentoo.org/glsa/201701-16Third Party Advisory
http://packetstormsecurity.com/files/135080/libtiff-4.0.6-Heap-Overflow.htmlExploit, Third Party Advisory, VDB Entry
http://rhn.redhat.com/errata/RHSA-2016-1546.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-1547.htmlThird Party Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.htmlThird Party Advisory
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.htmlThird Party Advisory
http://www.securityfocus.com/archive/1/537208/100/0/threadedBroken Link, VDB Entry
https://security.gentoo.org/glsa/201701-16Third Party Advisory

Timeline

Published: Jan 8, 2016
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-86695.3libraries/config/messages.inc.php in phpMyAdmin 4.0.x before 4.0.10.12, 4.4.x before 4.4.15.2, and 4.5.x before 4.5.3.1 allows remote attack CVE-2015-86706.5Huawei LogCenter V100R001C10 could allow an authenticated attacker to add abnormal device information to the log collection module, causing CVE-2015-86718.8Huawei LogCenter V100R001C10 could allow an authenticated attacker to tamper with requests using a tool and submit a request to the server f CVE-2015-86725.3The presentation transmission permission management mechanism in Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints w CVE-2015-86736.8Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before V100R001C10SPC100 do not require entry of the CVE-2015-86756.2Huawei S5300 Campus Series switches with software before V200R005SPH008 do not mask the password when uploading files, which allows physical CVE-2015-86767.5Memory leak in Huawei S5300EI, S5300SI, S5310HI, S6300EI/ S2350EI, and S5300LI Campus series switches with software V200R001C00 before V200R CVE-2015-86776.5Memory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches with software V200R003C00 before V200R003SPH011 and V200 CVE-2015-86785.5The ION driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CVE-2015-86795.5The Maxim_smartpa_dev driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL CVE-2015-86807.8The Graphics driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before CVE-2015-86817.8The ovisp driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GR