Wvware Libwmf vulnerabilities
7 known vulnerabilities affecting wvware/libwmf.
Total CVEs
7
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH2MEDIUM5
Vulnerabilities
Page 1 of 1
CVE-2016-9011MEDIUMCVSS 5.5v0.2.8.42017-03-23
CVE-2016-9011 [MEDIUM] CWE-119 CVE-2016-9011: The wmf_malloc function in api.c in libwmf 0.2.8.4 allows remote attackers to cause a denial of serv
The wmf_malloc function in api.c in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (application crash) via a crafted wmf file, which triggers a memory allocation failure.
nvdosv
CVE-2015-4588MEDIUMCVSS 6.8v0.2.8.42015-07-01
CVE-2015-4588 [MEDIUM] CWE-119 CVE-2015-4588: Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to
Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted "run-length count" in an image in a WMF file.
nvdosv
CVE-2015-4696MEDIUMCVSS 4.3v0.2.8.42015-07-01
CVE-2015-4696 [MEDIUM] CVE-2015-4696: Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service
Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) via a crafted WMF file to the (1) wmf2gd or (2) wmf2eps command.
nvdosv
CVE-2015-4695MEDIUMCVSS 5.0v0.2.8.42015-07-01
CVE-2015-4695 [MEDIUM] CWE-119 CVE-2015-4695: meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (out-of-bounds read) v
meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WMF file.
nvdosv
CVE-2015-0848MEDIUMCVSS 6.8v0.2.8.42015-07-01
CVE-2015-0848 [MEDIUM] CWE-119 CVE-2015-0848: Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (c
Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image.
nvdosv
CVE-2009-1364HIGHCVSS 7.5≥ 0, < 0.2.8.4-6.12009-05-01
CVE-2009-1364 [HIGH] CVE-2009-1364: Use-after-free vulnerability in the embedded GD library in libwmf 0
Use-after-free vulnerability in the embedded GD library in libwmf 0.2.8.4 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted WMF file.
osv
CVE-2006-3376HIGHCVSS 7.5v0.2.8_.42006-07-06
CVE-2006-3376 [HIGH] CVE-2006-3376: Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including (1) wv, (2) a
Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including (1) wv, (2) abiword, (3) freetype, (4) gimp, (5) libgsf, and (6) imagemagick allows remote attackers to execute arbitrary code via the MaxRecordSize header field in a WMF file.
nvdosv