Red Hat Security AdvisoryRHSA-2009:0457
libwmf security update
Released 2009-04-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) libwmf-0.2.8.4-10.2, libwmf-0.2.8.4-10.2.i386, libwmf-0.2.8.4-10.2.ia64 +5
- Red Hat Enterprise Linux AS version 4 libwmf-0.2.8.3-5.8, libwmf-0.2.8.3-5.8.i386, libwmf-0.2.8.3-5.8.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) libwmf-0.2.8.4-10.2, libwmf-0.2.8.4-10.2.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) libwmf-0.2.8.4-10.2, libwmf-devel-0.2.8.4-10.2, libwmf-devel-0.2.8.4-10.2.i386
- Red Hat Enterprise Linux Desktop version 4 libwmf-0.2.8.3-5.8, libwmf-0.2.8.3-5.8.i386, libwmf-devel-0.2.8.3-5.8 +1
- Red Hat Enterprise Linux ES version 4 libwmf-0.2.8.3-5.8, libwmf-0.2.8.3-5.8.i386, libwmf-0.2.8.3-5.8.ia64 +3
- Red Hat Enterprise Linux WS version 4 libwmf-0.2.8.3-5.8, libwmf-0.2.8.3-5.8.i386, libwmf-0.2.8.3-5.8.ia64 +3
Fixes 1 record
Priority LOW 39
Use-after-free vulnerability in the embedded GD library in libwmf 0.2.8.4 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted WMF file.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03463 · Published 2009-05-01 · Fixed
