Search for packages
Package details: pkg:deb/ubuntu/libwmf@0.2.8.3-2ubuntu0.1
purl pkg:deb/ubuntu/libwmf@0.2.8.3-2ubuntu0.1
Next non-vulnerable version 0.2.8.4-12
Latest non-vulnerable version 0.2.8.4-12
Risk 4.5
Vulnerabilities affecting this package (5)
Vulnerability Summary Fixed by
VCID-9xxq-5vck-aaae
Aliases:
CVE-2015-4588
Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted "run-length count" in an image in a WMF file.
0.2.8.4-10.3ubuntu1.14.04.1
Affected by 1 other vulnerability.
VCID-m27g-my7g-aaaq
Aliases:
CVE-2016-9011
The wmf_malloc function in api.c in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (application crash) via a crafted wmf file, which triggers a memory allocation failure.
0.2.8.4-12
Affected by 0 other vulnerabilities.
VCID-u5p9-dcv9-aaad
Aliases:
CVE-2015-4696
Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) via a crafted WMF file to the (1) wmf2gd or (2) wmf2eps command.
0.2.8.4-10.3ubuntu1.14.04.1
Affected by 1 other vulnerability.
VCID-z32g-xxgm-aaab
Aliases:
CVE-2015-4695
meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WMF file.
0.2.8.4-10.3ubuntu1.14.04.1
Affected by 1 other vulnerability.
VCID-zs3c-bdqd-aaaf
Aliases:
CVE-2015-0848
Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image.
0.2.8.4-10.3ubuntu1.14.04.1
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version