CVE-2015-8668

Name of the Vulnerable Software and Affected Versions libtiff versions 4.0.6 and earlier

Description The issue is related to a heap-based buffer overflow in the PackBitsPreEncode function in tif packbits.c in bmp2tiff, which allows remote attackers to execute arbitrary code or cause a denial of service via a large width field in a BMP image.

Recommendations For libtiff versions 4.0.6 and earlier, consider updating to a newer version to mitigate the risk of exploitation. As a temporary workaround, restrict the processing of BMP images with large width fields to minimize the risk of exploitation.