CVE-2015-0061

Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 do not properly initialize memory for TIFF images, which allows remote attackers to obtain sensitive information from process memory via a crafted image file, aka "TIFF Processing Information Disclosure Vulnerability."

• CWE-200

• http://www.securityfocus.com/bid/72456Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1031725Third Party Advisory, VDB Entry
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-016Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/100435Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/100436Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/72456Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1031725Third Party Advisory, VDB Entry
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-016Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/100435Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/100436Third Party Advisory, VDB Entry

Published

Feb 11, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-0055Microsoft Internet Explorer 10 and 11 allows remote attacker…
• CVE-2015-0056Microsoft Internet Explorer 11 allows remote attackers to ex…
• CVE-2015-0057win32k.sys in the kernel-mode drivers in Microsoft Windows S…
• CVE-2015-0058Double free vulnerability in win32k.sys in the kernel-mode d…
• CVE-2015-0059win32k.sys in the kernel-mode drivers in Microsoft Windows S…
• CVE-2015-0060The font mapper in win32k.sys in the kernel-mode drivers in …
• CVE-2015-0062Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows…
• CVE-2015-0063Microsoft Excel 2007 SP3; the proofing tools in Office 2010 …
• CVE-2015-0064Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Wor…
• CVE-2015-0065Microsoft Word 2007 SP3 allows remote attackers to execute a…
• CVE-2015-0066Microsoft Internet Explorer 11 allows remote attackers to ex…
• CVE-2015-0067Microsoft Internet Explorer 6 through 9 allows remote attack…