CVE-2015-0848 Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image.
MediumCVSS 6.8
EPSS 8.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libwmf(Debian:12) | < 0.2.8.4-10.4 | 0.2.8.4-10.4 |
| debian/libwmf(Debian:13) | < 0.2.8.4-10.4 | 0.2.8.4-10.4 |
| debian/libwmf(Debian:14) | < 0.2.8.4-10.4 | 0.2.8.4-10.4 |
| wvware libwmf | = 0.2.8.4 | No fix listed |
| fedoraproject fedora | = 21 | No fix listed |
| opensuse | = 13.1 | No fix listed |
| opensuse | = 13.2 | No fix listed |
References
- Debian Security Tracker CVE-2015-0848 vendor-advisory
- FEDORA-2015-9674 vendor-advisory
- FEDORA-2015-14848 vendor-advisory
- FEDORA-2015-14847 vendor-advisory
- openSUSE-SU-2015:1132 vendor-advisory
- openSUSE-SU-2015:1134 vendor-advisory
- openSUSE-SU-2015:1212 vendor-advisory
- RHSA-2015:1917 vendor-advisory
- DSA-3302 vendor-advisory
- [oss-security] 20150601 CVE-2015-0848 - Heap overflow on libwmf0.2-7 mailing-list
- www.oracle.com
- 74923 vdb-entry
- 1032771 vdb-entry
- USN-2670-1 vendor-advisory
- GLSA-201602-03 vendor-advisory
- bugs.debian.org issue-tracking