Lucene search

K
osvGoogleOSV:DSA-1194-1
HistoryOct 09, 2006 - 12:00 a.m.

libwmf

2006-10-0900:00:00
Google
osv.dev
5

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

It was discovered that an integer overflow in libwmf, the library to read
Windows Metafile Format files, can be exploited to execute arbitrary code
if a crafted WMF file is parsed.

For the stable distribution (sarge) this problem has been fixed in
version 0.2.8.3-2sarge1.

For the unstable distribution (sid) this problem has been fixed in
version 0.2.8.4-2.

We recommend that you upgrade your libwmf package.

CPENameOperatorVersion
libwmfeq0.2.8.3-2

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P