Red Hat Security AdvisoryRHSA-2015:1917
libwmf security update
Released 2015-10-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libwmf-0.2.8.4-41.el7_1, libwmf-lite-0.2.8.4-41.el7_1
- Red Hat Enterprise Linux Client Optional (v. 7) libwmf-devel-0.2.8.4-41.el7_1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libwmf-0.2.8.4-41.el7_1, libwmf-devel-0.2.8.4-41.el7_1, libwmf-lite-0.2.8.4-41.el7_1
- Red Hat Enterprise Linux Desktop (v. 6) libwmf-0.2.8.4-25.el6_7, libwmf-lite-0.2.8.4-25.el6_7
- Red Hat Enterprise Linux Desktop Optional (v. 6) libwmf-devel-0.2.8.4-25.el6_7
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libwmf-0.2.8.4-25.el6_7, libwmf-devel-0.2.8.4-25.el6_7, libwmf-lite-0.2.8.4-25.el6_7
- Red Hat Enterprise Linux Server (v. 6) libwmf-0.2.8.4-25.el6_7, libwmf-0.2.8.4-25.el6_7.ppc, libwmf-lite-0.2.8.4-25.el6_7 +1
- Red Hat Enterprise Linux Server (v. 7) libwmf-0.2.8.4-41.ael7b_1, libwmf-0.2.8.4-41.el7_1, libwmf-lite-0.2.8.4-41.ael7b_1 +2
- Red Hat Enterprise Linux Server Optional (v. 6) libwmf-devel-0.2.8.4-25.el6_7, libwmf-devel-0.2.8.4-25.el6_7.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) libwmf-0.2.8.4-41.el7_1, libwmf-0.2.8.4-41.el7_1.ppc, libwmf-devel-0.2.8.4-41.ael7b_1 +2
- Red Hat Enterprise Linux Workstation (v. 6) libwmf-0.2.8.4-25.el6_7, libwmf-lite-0.2.8.4-25.el6_7
- Red Hat Enterprise Linux Workstation (v. 7) libwmf-0.2.8.4-41.el7_1, libwmf-lite-0.2.8.4-41.el7_1
- Red Hat Enterprise Linux Workstation Optional (v. 6) libwmf-devel-0.2.8.4-25.el6_7
- Red Hat Enterprise Linux Workstation Optional (v. 7) libwmf-devel-0.2.8.4-41.el7_1
Fixes 4 records
Priority MEDIUM 42
Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted "run-length count" in an image in a W…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.09157 · Published 2015-07-01 · Partial fix CWE-119
Priority MEDIUM 41
Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.08483 · Published 2015-07-01 · Partial fix CWE-119
Priority LOW 32
meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WMF file.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0659 · Published 2015-07-01 · Partial fix CWE-119
Priority LOW 29
Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) via a crafted WMF file to the (1) wmf2gd or (2) wmf2eps command.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.05939 · Published 2015-07-01 · Partial fix
THREATIST.IORead the docs