Search for packages
Package details: pkg:deb/debian/libwmf@0.2.8.4-10.3%2Bdeb8u2
purl pkg:deb/debian/libwmf@0.2.8.4-10.3%2Bdeb8u2
Next non-vulnerable version 0.2.8.4-10.6
Latest non-vulnerable version 0.2.8.4-10.6
Risk 4.5
Vulnerabilities affecting this package (5)
Vulnerability Summary Fixed by
VCID-9xxq-5vck-aaae
Aliases:
CVE-2015-4588
Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted "run-length count" in an image in a WMF file.
0.2.8.4-10.6
Affected by 0 other vulnerabilities.
VCID-m27g-my7g-aaaq
Aliases:
CVE-2016-9011
The wmf_malloc function in api.c in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (application crash) via a crafted wmf file, which triggers a memory allocation failure.
0.2.8.4-10.6
Affected by 0 other vulnerabilities.
VCID-u5p9-dcv9-aaad
Aliases:
CVE-2015-4696
Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) via a crafted WMF file to the (1) wmf2gd or (2) wmf2eps command.
0.2.8.4-10.6
Affected by 0 other vulnerabilities.
VCID-z32g-xxgm-aaab
Aliases:
CVE-2015-4695
meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WMF file.
0.2.8.4-10.6
Affected by 0 other vulnerabilities.
VCID-zs3c-bdqd-aaaf
Aliases:
CVE-2015-0848
Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image.
0.2.8.4-10.6
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (4)
Vulnerability Summary Aliases
VCID-9xxq-5vck-aaae Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted "run-length count" in an image in a WMF file. CVE-2015-4588
VCID-u5p9-dcv9-aaad Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) via a crafted WMF file to the (1) wmf2gd or (2) wmf2eps command. CVE-2015-4696
VCID-z32g-xxgm-aaab meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WMF file. CVE-2015-4695
VCID-zs3c-bdqd-aaaf Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image. CVE-2015-0848

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-21T19:10:37.086976+00:00 Debian Oval Importer Affected by VCID-z32g-xxgm-aaab https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.3
2025-06-21T17:39:27.612903+00:00 Debian Oval Importer Affected by VCID-9xxq-5vck-aaae https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T15:28:10.055118+00:00 Debian Oval Importer Affected by VCID-u5p9-dcv9-aaad https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T15:06:54.530170+00:00 Debian Oval Importer Affected by VCID-m27g-my7g-aaaq https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T13:17:35.281485+00:00 Debian Oval Importer Affected by VCID-z32g-xxgm-aaab https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T12:56:35.647213+00:00 Debian Oval Importer Affected by VCID-zs3c-bdqd-aaaf https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T10:11:56.677748+00:00 Debian Oval Importer Fixing VCID-9xxq-5vck-aaae https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 36.1.3
2025-06-21T10:09:14.222687+00:00 Debian Oval Importer Fixing VCID-u5p9-dcv9-aaad https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 36.1.3
2025-06-21T10:03:37.498033+00:00 Debian Oval Importer Fixing VCID-zs3c-bdqd-aaaf https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 36.1.3
2025-06-21T09:46:54.530902+00:00 Debian Oval Importer Fixing VCID-z32g-xxgm-aaab https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 36.1.3
2025-06-21T00:27:50.951617+00:00 Debian Oval Importer Affected by VCID-u5p9-dcv9-aaad None 36.1.3
2025-06-20T23:06:59.835612+00:00 Debian Oval Importer Affected by VCID-z32g-xxgm-aaab None 36.1.3
2025-06-20T22:24:39.801518+00:00 Debian Oval Importer Affected by VCID-m27g-my7g-aaaq None 36.1.3
2025-06-20T21:45:11.312809+00:00 Debian Oval Importer Affected by VCID-9xxq-5vck-aaae None 36.1.3
2025-06-20T21:21:02.947543+00:00 Debian Oval Importer Affected by VCID-zs3c-bdqd-aaaf None 36.1.3
2025-06-20T19:38:22.222699+00:00 Debian Oval Importer Fixing VCID-zs3c-bdqd-aaaf None 36.1.3
2025-06-08T12:50:17.908550+00:00 Debian Oval Importer Affected by VCID-zs3c-bdqd-aaaf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.0
2025-06-08T11:39:32.069516+00:00 Debian Oval Importer Affected by VCID-z32g-xxgm-aaab https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.1.0
2025-06-08T10:13:09.272283+00:00 Debian Oval Importer Affected by VCID-9xxq-5vck-aaae https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T08:22:43.902069+00:00 Debian Oval Importer Affected by VCID-u5p9-dcv9-aaad https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T08:00:23.115851+00:00 Debian Oval Importer Affected by VCID-m27g-my7g-aaaq https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T06:12:11.273082+00:00 Debian Oval Importer Affected by VCID-z32g-xxgm-aaab https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T05:51:36.438680+00:00 Debian Oval Importer Affected by VCID-zs3c-bdqd-aaaf https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T04:00:56.397737+00:00 Debian Oval Importer Fixing VCID-9xxq-5vck-aaae https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 36.1.0
2025-06-08T03:58:21.002428+00:00 Debian Oval Importer Fixing VCID-u5p9-dcv9-aaad https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 36.1.0
2025-06-08T03:52:47.428745+00:00 Debian Oval Importer Fixing VCID-zs3c-bdqd-aaaf https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 36.1.0
2025-06-08T03:35:37.521686+00:00 Debian Oval Importer Fixing VCID-z32g-xxgm-aaab https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 36.1.0
2025-06-07T17:50:34.007328+00:00 Debian Oval Importer Affected by VCID-u5p9-dcv9-aaad None 36.1.0
2025-06-07T16:30:09.770824+00:00 Debian Oval Importer Affected by VCID-z32g-xxgm-aaab None 36.1.0
2025-06-07T15:48:54.426605+00:00 Debian Oval Importer Affected by VCID-m27g-my7g-aaaq None 36.1.0
2025-06-07T15:08:11.694980+00:00 Debian Oval Importer Affected by VCID-9xxq-5vck-aaae None 36.1.0
2025-06-07T14:44:42.348440+00:00 Debian Oval Importer Affected by VCID-zs3c-bdqd-aaaf None 36.1.0
2025-06-07T13:32:37.634321+00:00 Debian Oval Importer Fixing VCID-zs3c-bdqd-aaaf None 36.1.0
2025-04-12T22:00:15.107430+00:00 Debian Oval Importer Affected by VCID-m27g-my7g-aaaq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T21:16:48.462532+00:00 Debian Oval Importer Affected by VCID-9xxq-5vck-aaae https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T20:35:11.272200+00:00 Debian Oval Importer Affected by VCID-u5p9-dcv9-aaad https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T18:37:18.184549+00:00 Debian Oval Importer Affected by VCID-zs3c-bdqd-aaaf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T17:24:11.903140+00:00 Debian Oval Importer Affected by VCID-z32g-xxgm-aaab https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T15:53:57.332585+00:00 Debian Oval Importer Affected by VCID-9xxq-5vck-aaae https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T06:54:04.461912+00:00 Debian Oval Importer Affected by VCID-u5p9-dcv9-aaad https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T06:32:44.260482+00:00 Debian Oval Importer Affected by VCID-m27g-my7g-aaaq https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T04:44:18.887414+00:00 Debian Oval Importer Affected by VCID-z32g-xxgm-aaab https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T04:23:25.554575+00:00 Debian Oval Importer Affected by VCID-zs3c-bdqd-aaaf https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T02:29:11.892932+00:00 Debian Oval Importer Fixing VCID-9xxq-5vck-aaae https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 36.0.0
2025-04-08T02:26:27.546501+00:00 Debian Oval Importer Fixing VCID-u5p9-dcv9-aaad https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 36.0.0
2025-04-08T02:20:38.226644+00:00 Debian Oval Importer Fixing VCID-zs3c-bdqd-aaaf https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 36.0.0
2025-04-08T02:03:13.857977+00:00 Debian Oval Importer Fixing VCID-z32g-xxgm-aaab https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 36.0.0
2025-04-07T16:27:11.273387+00:00 Debian Oval Importer Affected by VCID-u5p9-dcv9-aaad None 36.0.0
2025-04-07T15:02:07.584934+00:00 Debian Oval Importer Affected by VCID-z32g-xxgm-aaab None 36.0.0
2025-04-07T14:19:42.709054+00:00 Debian Oval Importer Affected by VCID-m27g-my7g-aaaq None 36.0.0
2025-04-07T13:39:55.770221+00:00 Debian Oval Importer Affected by VCID-9xxq-5vck-aaae None 36.0.0
2025-04-07T13:16:41.178094+00:00 Debian Oval Importer Affected by VCID-zs3c-bdqd-aaaf None 36.0.0
2025-04-07T12:08:02.767448+00:00 Debian Oval Importer Fixing VCID-zs3c-bdqd-aaaf None 36.0.0