Integer Overflow Vulnerability in libwmf Affecting Multiple Products
CVE-2006-3376

Currently unrated

Key Information:

Vendor: Wvware
Status: Wv2; Libwmf
Vendor: CVE Published:; 6 July 2006

What is CVE-2006-3376?

The vulnerability arises due to an integer overflow in the player.c file within the libwmf library. This flaw can be exploited by remote attackers who craft specific WMF files with manipulated MaxRecordSize header fields. When processed by affected applications, this may allow for arbitrary code execution, posing a serious risk to system integrity. Several products, including wv, abiword, freetype, gimp, libgsf, and imagemagick utilize this library, making them susceptible to this vulnerability.