RSS   Vulnerabilities for 'Libwmf'   RSS

2017-03-23
 
CVE-2016-9011

 

 
The wmf_malloc function in api.c in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (application crash) via a crafted wmf file, which triggers a memory allocation failure.

 
2015-07-01
 
CVE-2015-4696

 

 
Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) via a crafted WMF file to the (1) wmf2gd or (2) wmf2eps command.

 
 
CVE-2015-4695

 

 
meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WMF file.

 
 
CVE-2015-4588

CWE-119
 

 
Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted "run-length count" in an image in a WMF file.

 
 
CVE-2015-0848

CWE-119
 

 
Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image.

 
2006-07-06
 
CVE-2006-3376

CWE-Other
 

 
Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including (1) wv, (2) abiword, (3) freetype, (4) gimp, (5) libgsf, and (6) imagemagick allows remote attackers to execute arbitrary code via the MaxRecordSize header field in a WMF file.

 

 >>> Vendor: Wvware 3 Products
Wvware
WV2
Libwmf


Copyright 2024, cxsecurity.com

 

Back to Top