Skip to content
OpenAdvisories
Unscored USN-2670-1 4 CVEs

libwmf vulnerabilities

Published Jul 8, 2015 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Fernando Muñoz and Stefan Cornelius discovered that libwmf incorrectly
handled certain malformed images. If a user or automated system were
tricked into opening a crafted image file, an attacker could cause a denial
of service or execute arbitrary code with privileges of the user invoking
the program.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS libwmf 0.2.8.4-10.3ubuntu1.14.04.1

Vulnerabilities 4

  • Unscored —
    CVE-2015-0848

    Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly e…

    libwmf libwmf Debian Ubuntu
  • Unscored —
    CVE-2015-4588

    Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to cause a denial of s…

    libwmf libwmf Debian Ubuntu
  • Unscored —
    CVE-2015-4695

    meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WMF fi…

    libwmf libwmf Debian Ubuntu
  • Unscored —
    CVE-2015-4696

    Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) via a craft…

    libwmf libwmf Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2015-0848
  • report
    https://ubuntu.com/security/CVE-2015-4588
  • report
    https://ubuntu.com/security/CVE-2015-4695
  • report
    https://ubuntu.com/security/CVE-2015-4696