VendorswvWarelibwmf0.2.8.4
Vulnerabilities

wvWare libwmf 0.2.8.4

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2015-4588
Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted "run-length count" in an image in a WMF file.
Published 2015-07-01 · Modified
6.8EPSS 0.092
CVE-2015-0848
Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image.
Published 2015-07-01 · Modified
6.8EPSS 0.085
CVE-2016-9011
The wmf_malloc function in api.c in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (application crash) via a crafted wmf file, which triggers a memory allocation failure.
Published 2017-03-23 · Modified
5.5EPSS 0.026
CVE-2015-4695
meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WMF file.
Published 2015-07-01 · Modified
5.0EPSS 0.066
CVE-2015-4696
Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) via a crafted WMF file to the (1) wmf2gd or (2) wmf2eps command.
Published 2015-07-01 · Modified
4.3EPSS 0.060