tocsin

Debian/netsurf: high 7.5

libnsbmp.c in Libnsbmp 0.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds read) via a crafted color table to the (1) bmp_decode_rgb or (2) bmp_decode_rle function.

Action: Upgrade netsurf to 3.2+dfsg-3 or later.

Affected

introducedfixedlast affected
03.2+dfsg-3-

Fixed versions

3.2+dfsg-3

Sources

published · modified · JSON