Denial of Service Vulnerability in libwmf by Debian
CVE-2015-4695

Currently unrated

Key Information:

Vendor

Wvware

Status
Libwmf
Vendor
CVE Published:
1 July 2015

What is CVE-2015-4695?

The libwmf library prior to version 0.2.8.4 is susceptible to a vulnerability that enables remote attackers to execute a denial of service attack. This is achieved through the manipulation of WMF (Windows Meta File) files, which can prompt out-of-bounds read operations, potentially leading to application crashes or resource exhaustion.

References

http://www.debian.org/security/2015/dsa-3302
vendor-advisoryx_refsource_DEBIAN
http://www.securityfocus.com/bid/75329
vdb-entryx_refsource_BID
https://security.gentoo.org/glsa/201602-03
vendor-advisoryx_refsource_GENTOO

EPSS Score

6% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.