Skip to content
OpenAdvisories
Unscored RHSA-2015:1917 4 CVEs

Red Hat Security Advisory: libwmf security update

Published Sep 15, 2024 · Updated Jun 27, 2026

Ecosystem: Red Hat

Fixed packages 32

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client libwmf 0:0.2.8.4-25.el6_7
Red Hat · RHEL 6 enterprise_linux:6::client libwmf-debuginfo 0:0.2.8.4-25.el6_7
Red Hat · RHEL 6 enterprise_linux:6::client libwmf-devel 0:0.2.8.4-25.el6_7
Red Hat · RHEL 6 enterprise_linux:6::client libwmf-lite 0:0.2.8.4-25.el6_7
Red Hat · RHEL 6 enterprise_linux:6::computenode libwmf 0:0.2.8.4-25.el6_7
Red Hat · RHEL 6 enterprise_linux:6::computenode libwmf-debuginfo 0:0.2.8.4-25.el6_7
Red Hat · RHEL 6 enterprise_linux:6::computenode libwmf-devel 0:0.2.8.4-25.el6_7
Red Hat · RHEL 6 enterprise_linux:6::computenode libwmf-lite 0:0.2.8.4-25.el6_7
Red Hat · RHEL 6 enterprise_linux:6::server libwmf 0:0.2.8.4-25.el6_7
Red Hat · RHEL 6 enterprise_linux:6::server libwmf-debuginfo 0:0.2.8.4-25.el6_7
Red Hat · RHEL 6 enterprise_linux:6::server libwmf-devel 0:0.2.8.4-25.el6_7
Red Hat · RHEL 6 enterprise_linux:6::server libwmf-lite 0:0.2.8.4-25.el6_7
Red Hat · RHEL 6 enterprise_linux:6::workstation libwmf 0:0.2.8.4-25.el6_7
Red Hat · RHEL 6 enterprise_linux:6::workstation libwmf-debuginfo 0:0.2.8.4-25.el6_7
Red Hat · RHEL 6 enterprise_linux:6::workstation libwmf-devel 0:0.2.8.4-25.el6_7
Red Hat · RHEL 6 enterprise_linux:6::workstation libwmf-lite 0:0.2.8.4-25.el6_7
Red Hat · RHEL 7 enterprise_linux:7::client libwmf 0:0.2.8.4-41.el7_1
Red Hat · RHEL 7 enterprise_linux:7::client libwmf-debuginfo 0:0.2.8.4-41.el7_1
Red Hat · RHEL 7 enterprise_linux:7::client libwmf-devel 0:0.2.8.4-41.el7_1
Red Hat · RHEL 7 enterprise_linux:7::client libwmf-lite 0:0.2.8.4-41.el7_1
Red Hat · RHEL 7 enterprise_linux:7::computenode libwmf 0:0.2.8.4-41.el7_1
Red Hat · RHEL 7 enterprise_linux:7::computenode libwmf-debuginfo 0:0.2.8.4-41.el7_1
Red Hat · RHEL 7 enterprise_linux:7::computenode libwmf-devel 0:0.2.8.4-41.el7_1
Red Hat · RHEL 7 enterprise_linux:7::computenode libwmf-lite 0:0.2.8.4-41.el7_1
Red Hat · RHEL 7 enterprise_linux:7::server libwmf 0:0.2.8.4-41.el7_1
Red Hat · RHEL 7 enterprise_linux:7::server libwmf-debuginfo 0:0.2.8.4-41.ael7b_1
Red Hat · RHEL 7 enterprise_linux:7::server libwmf-devel 0:0.2.8.4-41.ael7b_1
Red Hat · RHEL 7 enterprise_linux:7::server libwmf-lite 0:0.2.8.4-41.ael7b_1
Red Hat · RHEL 7 enterprise_linux:7::workstation libwmf 0:0.2.8.4-41.el7_1
Red Hat · RHEL 7 enterprise_linux:7::workstation libwmf-debuginfo 0:0.2.8.4-41.el7_1
Red Hat · RHEL 7 enterprise_linux:7::workstation libwmf-devel 0:0.2.8.4-41.el7_1
Red Hat · RHEL 7 enterprise_linux:7::workstation libwmf-lite 0:0.2.8.4-41.el7_1

Vulnerabilities 4

  • Unscored —
    CVE-2015-0848

    Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly e…

    libwmf libwmf Debian Ubuntu
  • Unscored —
    CVE-2015-4588

    Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to cause a denial of s…

    libwmf libwmf Debian Ubuntu
  • Unscored —
    CVE-2015-4695

    meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WMF fi…

    libwmf libwmf Debian Ubuntu
  • Unscored —
    CVE-2015-4696

    Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) via a craft…

    libwmf libwmf Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1227243
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1235665
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1235669
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1272993
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1917.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-0848
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-0848
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-0848
  • report
    https://access.redhat.com/security/cve/CVE-2015-4588
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4588
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4588
  • report
    https://access.redhat.com/security/cve/CVE-2015-4695
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4695
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4695
  • report
    https://access.redhat.com/security/cve/CVE-2015-4696
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4696
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4696