CVE-2015-4696 Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) via a crafted WMF file to the (1) wmf2gd or (2) wmf2eps command.
MediumCVSS 4.3
EPSS 5.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) via a crafted WMF file to the (1) wmf2gd or (2) wmf2eps command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libwmf(Debian:12) | < 0.2.8.4-10.4 | 0.2.8.4-10.4 |
| debian/libwmf(Debian:13) | < 0.2.8.4-10.4 | 0.2.8.4-10.4 |
| debian/libwmf(Debian:14) | < 0.2.8.4-10.4 | 0.2.8.4-10.4 |
| wvware libwmf | = 0.2.8.4 | No fix listed |
References
- Debian Security Tracker CVE-2015-4696 vendor-advisory
- FEDORA-2015-10601 vendor-advisory
- openSUSE-SU-2015:1212 vendor-advisory
- RHSA-2015:1917 vendor-advisory
- DSA-3302 vendor-advisory
- [oss-security] 20150617 Re: CVE-2015-0848 - Heap overflow on libwmf0.2-7 mailing-list
- [oss-security] 20150621 Re: CVE-2015-0848 - Heap overflow on libwmf0.2-7 mailing-list
- www.oracle.com
- 75331 vdb-entry
- 1032771 vdb-entry
- USN-2670-1 vendor-advisory
- bugs.debian.org exploit
- GLSA-201602-03 vendor-advisory
- bugs.debian.org issue-tracking