PT-2015-4915

Name of the Vulnerable Software and Affected Versions libwmf version 0.2.8.4 Description A heap-based buffer overflow issue allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted BMP image. Recommendations For libwmf version 0.2.8.4, consider updatin...

CVE-2015-4696: Undefined Security Weakness

Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service crash via a crafted WMF file to the 1 wmf2gd or 2 wmf2eps command...

UBUNTU-CVE-2015-0848

Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted BMP image...

UBUNTU-CVE-2015-4695

meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of service out-of-bounds read via a crafted WMF file...

UBUNTU-CVE-2015-4588

Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted "run-length count" in an image in a WMF file...

PT-2015-6631

Name of the Vulnerable Software and Affected Versions libwmf version 0.2.8.4 Description The issue is related to a heap-based buffer overflow in the DecodeImage function, which can be triggered by a crafted "run-length count" in an image in a WMF file. This can cause a denial of service crash or...

PT-2015-6672

Name of the Vulnerable Software and Affected Versions libwmf version 0.2.8.4 Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds read, by using a crafted WMF file. Recommendations For libwmf version 0.2.8.4, update to a newer version that...

CVE-2015-4588: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted "run-length count" in an image in a WMF file...

UBUNTU-CVE-2015-4696

Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service crash via a crafted WMF file to the 1 wmf2gd or 2 wmf2eps command...

CVE-2015-4696

Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service crash via a crafted WMF file to the 1 wmf2gd or 2 wmf2eps command...

CVE-2015-0848

Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted BMP image...

CVE-2015-0848: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted BMP image...

CVE-2015-4695: Improper Restriction of Operations within the Bounds of a Memory Buffer

meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of service out-of-bounds read via a crafted WMF file...

[SECURITY] [DLA 257-1] libwmf security update

Package : libwmf Version : 0.2.8.4-6.2+deb6u2 CVE ID : CVE-2015-4695 CVE-2015-4696 Debian Bug : 784192 784205 libwmf is vulnerable to two denial of service due to invalid read operations when processing specially crafted WMF files. CVE-2015-4695 Heap buffer overread in libwmf CVE-2015-4696 Read...

Debian DLA-257-1 : libwmf security update

libwmf is vulnerable to two denial of service due to invalid read operations when processing specially crafted WMF files. CVE-2015-4695 Heap buffer overread in libwmf CVE-2015-4696 Read after free in wmf2gd/wmf2eps For the squeeze distribution, those issues have been fixed in libwmf...

DLA-257-1 libwmf - security update

Bulletin has no description...

[SECURITY] [DLA 253-1] libwmf security update

Package : libwmf Version : 0.2.8.4-6.2+deb6u1 CVE ID : CVE-2015-0848 CVE-2015-4588 Debian Bug : 787644 The following vulnerabilities were discovered in the Windows Metafile conversion library when reading BMP images embedded into WMF files: CVE-2015-0848 A heap overflow when decoding embedded BMP...

libwmf Heap Buffer Overflow Vulnerability

libwmf is a library of functions for reading and displaying Microsoft WMF graphics. A heap buffer overflow vulnerability exists in libwmf that could be exploited by an attacker to construct a malicious file that could be parsed by a user, which could crash an application or execute arbitrary code...

DLA-253-1 libwmf - security update

Bulletin has no description...

Debian DLA-253-1 : libwmf security update

The following vulnerabilities were discovered in the Windows Metafile conversion library when reading BMP images embedded into WMF files : CVE-2015-0848 A heap overflow when decoding embedded BMP images that don't use 8 bits per pixel. CVE-2015-4588 A missing check in the RLE decoding of embedded...