libwmf vulnerability

2009-05-0400:00:00

ubuntu.com

7.3 High

AI Score

Confidence

High

0.016 Low

EPSS

Percentile

87.6%

JSON

Releases

Ubuntu 9.04
Ubuntu 8.10
Ubuntu 8.04
Ubuntu 6.06

Packages

libwmf -

Details

Tavis Ormandy discovered that libwmf incorrectly used memory after it had
been freed when using its embedded GD library. If a user or automated
system were tricked into opening a crafted WMF file, an attacker could
cause a denial of service or execute arbitrary code with privileges of the
user invoking the program.

OSVersionArchitecturePackageVersionFilename
Ubuntu9.04noarchlibwmf0.2-7< 0.2.8.4-6ubuntu1.1UNKNOWN
Ubuntu9.04noarchlibwmf-bin< 0.2.8.4-6ubuntu1.1UNKNOWN
Ubuntu9.04noarchlibwmf-dev< 0.2.8.4-6ubuntu1.1UNKNOWN
Ubuntu9.04noarchlibwmf0.2-7-gtk< 0.2.8.4-6ubuntu1.1UNKNOWN
Ubuntu8.10noarchlibwmf0.2-7< 0.2.8.4-6ubuntu0.8.10.1UNKNOWN
Ubuntu8.10noarchlibwmf-bin< 0.2.8.4-6ubuntu0.8.10.1UNKNOWN
Ubuntu8.10noarchlibwmf-dev< 0.2.8.4-6ubuntu0.8.10.1UNKNOWN
Ubuntu8.04noarchlibwmf0.2-7< 0.2.8.4-6ubuntu0.8.04.1UNKNOWN
Ubuntu8.04noarchlibwmf-bin< 0.2.8.4-6ubuntu0.8.04.1UNKNOWN
Ubuntu8.04noarchlibwmf-dev< 0.2.8.4-6ubuntu0.8.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	9.04	noarch	libwmf0.2-7	< 0.2.8.4-6ubuntu1.1	UNKNOWN
Ubuntu	9.04	noarch	libwmf-bin	< 0.2.8.4-6ubuntu1.1	UNKNOWN
Ubuntu	9.04	noarch	libwmf-dev	< 0.2.8.4-6ubuntu1.1	UNKNOWN
Ubuntu	9.04	noarch	libwmf0.2-7-gtk	< 0.2.8.4-6ubuntu1.1	UNKNOWN
Ubuntu	8.10	noarch	libwmf0.2-7	< 0.2.8.4-6ubuntu0.8.10.1	UNKNOWN
Ubuntu	8.10	noarch	libwmf-bin	< 0.2.8.4-6ubuntu0.8.10.1	UNKNOWN
Ubuntu	8.10	noarch	libwmf-dev	< 0.2.8.4-6ubuntu0.8.10.1	UNKNOWN
Ubuntu	8.04	noarch	libwmf0.2-7	< 0.2.8.4-6ubuntu0.8.04.1	UNKNOWN
Ubuntu	8.04	noarch	libwmf-bin	< 0.2.8.4-6ubuntu0.8.04.1	UNKNOWN
Ubuntu	8.04	noarch	libwmf-dev	< 0.2.8.4-6ubuntu0.8.04.1	UNKNOWN