libnsbmp.c in Libnsbmp 0.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds read) via a crafted color table to the (1) bmp_decode_rgb or (2) bmp_decode_rle function.
The product reads data past the end, or before the beginning, of the intended buffer.
Link | Tags |
---|---|
http://www.securityfocus.com/archive/1/archive/1/537132/100/0/threaded | third party advisory vdb entry |
http://seclists.org/fulldisclosure/2015/Dec/73 | mailing list third party advisory exploit |