Skip to content
OpenAdvisories
High ELSA-2015-1917 4 CVEs

Important: libwmf security update (Oracle Linux 7)

Published Oct 20, 2015 · Updated Oct 20, 2015

Ecosystem: Oracle Linux

Summary

[0.2.8.4-25]
- Resolves: rhbz#1227428 - CVE-2015-0848 CVE-2015-4588 CVE-2015-4695 CVE-2015-4696

[0.2.8.4-24]
- Resolves: rhbz#1227429 CVE-2015-0848 libwmf: heap overflow when decoding BMP images

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 7 libwmf 0:0.2.8.4-41.el7_1
Oracle Linux · 7 libwmf-devel 0:0.2.8.4-41.el7_1
Oracle Linux · 7 libwmf-lite 0:0.2.8.4-41.el7_1

Vulnerabilities 4

  • Unscored —
    CVE-2015-0848

    Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly e…

    libwmf libwmf Debian Ubuntu
  • Unscored —
    CVE-2015-4588

    Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to cause a denial of s…

    libwmf libwmf Debian Ubuntu
  • Unscored —
    CVE-2015-4695

    meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WMF fi…

    libwmf libwmf Debian Ubuntu
  • Unscored —
    CVE-2015-4696

    Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) via a craft…

    libwmf libwmf Debian Ubuntu