Filtered by vendor Wvware Subscriptions
Filtered by product Libwmf Subscriptions
Total 6 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2015-0848 3 Fedoraproject, Opensuse, Wvware 3 Fedora, Opensuse, Libwmf 2018-10-30 N/A
Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image.
CVE-2015-4588 3 Fedoraproject, Opensuse, Wvware 3 Fedora, Opensuse, Libwmf 2018-10-30 N/A
Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted "run-length count" in an image in a WMF file.
CVE-2006-3376 1 Wvware 2 Libwmf, Wv2 2018-10-18 N/A
Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including (1) wv, (2) abiword, (3) freetype, (4) gimp, (5) libgsf, and (6) imagemagick allows remote attackers to execute arbitrary code via the MaxRecordSize header field in a WMF file.
CVE-2015-4696 1 Wvware 1 Libwmf 2017-09-22 N/A
Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) via a crafted WMF file to the (1) wmf2gd or (2) wmf2eps command.
CVE-2015-4695 1 Wvware 1 Libwmf 2017-09-22 N/A
meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WMF file.
CVE-2016-9011 1 Wvware 1 Libwmf 2017-03-27 N/A
The wmf_malloc function in api.c in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (application crash) via a crafted wmf file, which triggers a memory allocation failure.