Description
Use-after-free vulnerability in the embedded GD library in libwmf 0.2.8.4 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted WMF file.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | libwmf | 0.2.8.4-6.1 | — |
| Debian 13 | libwmf | 0.2.8.4-6.1 | — |
| Debian 12 | libwmf | 0.2.8.4-6.1 | — |
| Debian 5.0 | libwmf | 0.2.8.4-6+lenny1 | DSA-1796-1 |
| Debian 4.0 | libwmf | 0.2.8.4-2+etch1 | DSA-1796-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | libwmf +1 | 0.2.8.4-10.2 | RHSA-2009:0457 |
| RHEL 4 | libwmf +1 | 0.2.8.3-5.8 | RHSA-2009:0457 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 | libwmf | 0.2.8.4-242.3 | SUSE-SU-2015:1484-1 |
Advisories 3
- RHSA-2009:0457 Red Hat Security Advisory: libwmf security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1796-1 libwmf - denial of service Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2015:1484-1 Security update for libwmf SUSE / openSUSE Security Updates · Feb 4, 2026
References
- RHSA-2009:0457 vendor-advisory
- 34964 third-party-advisory
- 35001 third-party-advisory
- 35190 third-party-advisory
- https://launchpad.net/bugs/cve/2009-1364
- openSUSE-SU-2015:1132 vendor-advisory
- FEDORA-2009-5524 vendor-advisory
- SUSE-SR:2009:011 vendor-advisory
- FEDORA-2009-5518 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=496864
- http://wvware.cvs.sourceforge.net/viewvc/wvware/libwmf2/src/extra/Makefile.am?hideattic=0&view=log
- openSUSE-SU-2015:1134 vendor-advisory
- 35686 third-party-advisory
- 1022154 vdb-entry
- 34901 third-party-advisory
- oval:org.mitre.oval:def:10959 vdb-entry signature
- GLSA-200907-01 vendor-advisory
- 35416 third-party-advisory
- FEDORA-2009-5517 vendor-advisory
- DSA-1796 vendor-advisory
- 34792 vdb-entry
- libwmf-gdlibrary-code-execution(50290) vdb-entry
- 35025 third-party-advisory
- USN-769-1 vendor-advisory
- MDVSA-2009:106 vendor-advisory
- ADV-2009-1228 vdb-entry