Use-After-Free Vulnerability in libwmf Affecting Multiple Vendors
CVE-2015-4696

Currently unrated

Key Information:

Vendor

Wvware

Status
Libwmf
Vendor
CVE Published:
1 July 2015

What is CVE-2015-4696?

A use-after-free vulnerability in libwmf 0.2.8.4 exposes systems to potential remote attacks, allowing attackers to execute denial of service attacks. This occurs through crafted WMF files targeting the wmf2gd and wmf2eps commands, potentially leading to application crashes and disruption of services. Affected systems should upgrade to patched versions to mitigate risks.

References

http://www.debian.org/security/2015/dsa-3302
vendor-advisoryx_refsource_DEBIAN
https://security.gentoo.org/glsa/201602-03
vendor-advisoryx_refsource_GENTOO
http://www.securityfocus.com/bid/75331
vdb-entryx_refsource_BID

EPSS Score

5% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.