Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2006-3376

security flaw

Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including (1) wv, (2) abiword, (3) freetype, (4) gimp, (5) libgsf, and (6) imagemagick allows remote attackers to execute arbitrary code via the MaxRecordSize header field in a WMF file.

CVSS 2.0 · 7.5 High EPSS 7.7% KEV · Not listed
Vendors
Redhat Wvware
Products
Enterprise Linux Libwmf Wv2
CVE-2016-9011

libwmf: Memory allocation failure in wmf_malloc

The wmf_malloc function in api.c in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (application crash) via a crafted wmf file, which triggers a memory allocation failure.

CVSS 3.0 · 5.5 Medium EPSS 2.7% KEV · Not listed
Vendors
Wvware
Products
Libwmf
CVE-2015-0848

libwmf: heap overflow when decoding BMP images

Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image.

CVSS 2.0 · 6.8 Medium EPSS 8.5% KEV · Not listed
Vendors
Fedoraproject Opensuse Redhat and 1 more
Products
Fedora Opensuse Enterprise Linux and 1 more
CVE-2015-4588

libwmf: heap overflow within the RLE decoding of embedded BMP images

Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted "run-length count" in an image in a WMF file.

CVSS 2.0 · 6.8 Medium EPSS 9.2% KEV · Not listed
Vendors
Fedoraproject Opensuse Redhat and 1 more
Products
Fedora Opensuse Enterprise Linux and 1 more
CVE-2015-4695

libwmf: heap buffer overread in meta.h

meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WMF file.

CVSS 2.0 · 5.0 Medium EPSS 6.6% KEV · Not listed
Vendors
Redhat Wvware
Products
Enterprise Linux Libwmf
CVE-2015-4696

libwmf: use-after-free flaw in meta.h

Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) via a crafted WMF file to the (1) wmf2gd or (2) wmf2eps command.

CVSS 2.0 · 4.3 Medium EPSS 5.9% KEV · Not listed
Vendors
Redhat Wvware
Products
Enterprise Linux Libwmf