Heap-based Buffer Overflow in libwmf Affects Multiple Vendors
CVE-2015-0848

Currently unrated

Key Information:

Vendor

Wvware

Status
Libwmf
Vendor
CVE Published:
1 July 2015

What is CVE-2015-0848?

This vulnerability arises from a heap-based buffer overflow in libwmf version 0.2.8.4, allowing remote attackers to exploit crafted BMP images. Such an attack can lead to a denial of service by crashing the application or may allow the execution of arbitrary code, potentially compromising system integrity. Multiple advisories have been issued to address this risk across various platforms, urging users to update their packages to prevent potential exploitation.

References

http://www.debian.org/security/2015/dsa-3302
vendor-advisoryx_refsource_DEBIAN
http://www.openwall.com/lists/oss-security/2015/06/01/2
mailing-listx_refsource_MLIST
http://lists.fedoraproject.org/pipermail/package-announce...
vendor-advisoryx_refsource_FEDORA

EPSS Score

8% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.