CVE-2015-4588 Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted "run-length count...
MediumCVSS 6.8
EPSS 9.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted "run-length count" in an image in a WMF file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libwmf(Debian:12) | < 0.2.8.4-10.4 | 0.2.8.4-10.4 |
| debian/libwmf(Debian:13) | < 0.2.8.4-10.4 | 0.2.8.4-10.4 |
| debian/libwmf(Debian:14) | < 0.2.8.4-10.4 | 0.2.8.4-10.4 |
| opensuse | = 13.1 | No fix listed |
| opensuse | = 13.2 | No fix listed |
| wvware libwmf | = 0.2.8.4 | No fix listed |
| fedoraproject fedora | = 21 | No fix listed |
References
- Debian Security Tracker CVE-2015-4588 vendor-advisory
- FEDORA-2015-9674 vendor-advisory
- openSUSE-SU-2015:1132 vendor-advisory
- openSUSE-SU-2015:1134 vendor-advisory
- openSUSE-SU-2015:1212 vendor-advisory
- RHSA-2015:1917 vendor-advisory
- DSA-3302 vendor-advisory
- [oss-security] 20150603 Re: CVE-2015-0848 - Heap overflow on libwmf0.2-7 mailing-list
- [oss-security] 20150615 Re: CVE-2015-0848 - Heap overflow on libwmf0.2-7 mailing-list
- www.oracle.com
- 75230 vdb-entry
- 1032771 vdb-entry
- USN-2670-1 vendor-advisory
- bugzilla.redhat.com exploit
- GLSA-201602-03 vendor-advisory
- bugs.debian.org issue-tracking