libwmf security update

0.2.8.4-10.2 - Resolves: rhbz497511 CVE-2009-1364 bad realloc...

PT-2009-1069 · Gd +3 · Gd Library +4

Name of the Vulnerable Software and Affected Versions: libwmf versions 0.2.8.3 through 0.2.8.4 libwmf-devel versions 0.2.8.3 through 0.2.8.4 Description: The issue is related to a use-after-free vulnerability in the embedded GD library in libwmf, which allows context-dependent attackers to cause ...

Mandriva Update for libwmf MDKSA-2007:123 (libwmf)

Check for the Version of libwmf OpenVAS Vulnerability Test Mandriva Update for libwmf MDKSA-2007:123 libwmf Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for libwmf MDKSA-2007:123 (libwmf)

Check for the Version of libwmf OpenVAS Vulnerability Test Mandriva Update for libwmf MDKSA-2007:123 libwmf Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for libwmf MDKSA-2007:036 (libwmf)

Check for the Version of libwmf OpenVAS Vulnerability Test Mandriva Update for libwmf MDKSA-2007:036 libwmf Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Gentoo Security Advisory GLSA 200608-17 (libwmf)

The remote host is missing updates announced in advisory GLSA 200608-17. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200608-17 (libwmf)

The remote host is missing updates announced in advisory GLSA 200608-17. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Debian: Security Advisory (DSA-1194-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1194-1 (libwmf)

The remote host is missing an update to libwmf announced via advisory DSA 1194-1. It was discovered that an integer overflow in libwmf, the library to read Windows Metafile Format files, can be exploited to execute arbitrary code if a crafted WMF file is parsed. OpenVAS Vulnerability Test $Id:...

SuSE 10 Security Update : libwmf (ZYPP Patch Number 1833)

A heap overflow could be triggered by specially crafted WMF Windows Meta Files in the libwmf library. This problem could be exploited to execute code, by a remote attacker providing a file with embedded WMF data to an application understanding this like OpenOfficeorg, abiword, gimp. This issue is...

Ubuntu 5.04 / 5.10 / 6.06 LTS : libwmf vulnerability (USN-333-1)

An integer overflow was found in the handling of the MaxRecordSize field in the WMF header parser. By tricking a user into opening a specially crafted WMF image file with an application that uses this library, an attacker could exploit this to execute arbitrary code with the user's privileges. No...

openSUSE 10 Security Update : libwmf (libwmf-1840)

A heap overflow could be triggered by specially crafted WMF Windows Meta Files in the libwmf library. This problem could be exploited to execute code, by a remote attacker providing a file with embedded WMF data to an application understanding this like OpenOfficeorg, abiword, gimp. This issue is...

Mandrake Linux Security Advisory : libwmf (MDKSA-2007:123)

A flaw in libgd2 was found by Xavier Roche where it would not correctly validate PNG callback results. If an application linked against libgd2 was tricked into processing a specially crafted PNG file, it could cause a denial of service scenario via CPU resource consumption. Libwmf uses an embedde...

Mandrake Linux Security Advisory : libwmf (MDKSA-2007:036)

Buffer overflow in the gdImageStringFTEx function in gdft.c in the GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted string with a JIS encoded font. Libwmf uses an embedded copy of the gd...

Fedora Core 5 : libwmf-0.2.8.4-5.2 (2006-831)

Fix side-effect of CVE-2006-3376 on x8664 edge case Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora Core 4 : libwmf-0.2.8.3-8.2 (2006-832)

CVE-2006-3376: fix minor side-effect on 64bit platforms Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora Core 4 : libwmf-0.2.8.3-8.1 (2006-804)

CVE-2006-3376 integer overflow Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora Core 5 : libwmf-0.2.8.4-5.1 (2006-805)

CVE-2006-3376 int overflow Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenab...

Mandrake Linux Security Advisory : libwmf (MDKSA-2006:132)

Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including 1 wv, 2 abiword, 3 freetype, 4 gimp, 5 libgsf, and 6 imagemagick allows remote attackers to execute arbitrary code via the MaxRecordSize header field in a WMF file. Updated packages have been patched to correct...

Debian DSA-1194-1 : libwmf - integer overflow

It was discovered that an integer overflow in libwmf, the library to read Windows Metafile Format files, can be exploited to execute arbitrary code if a crafted WMF file is parsed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...