CVE-2015-4588

概要

参考情報

• lists.fedoraproject.org/pipermail/package-announce/2015-June/160668.html
• lists.opensuse.org/opensuse-updates/2015-06/msg00051.html
• lists.opensuse.org/opensuse-updates/2015-06/msg00053.html
• lists.opensuse.org/opensuse-updates/2015-07/msg00018.html
• rhn.redhat.com/errata/RHSA-2015-1917.html
• debian.org/security/2015/dsa-3302
• openwall.com/lists/oss-security/2015/06/03/6
• openwall.com/lists/oss-security/2015/06/16/4
• oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
• securityfocus.com/bid/75230
• securitytracker.com/id/1032771
• ubuntu.com/usn/USN-2670-1
• bugzilla.redhat.com/show_bug.cgi · Exploit
• security.gentoo.org/glsa/201602-03

libwmf のその他の脆弱性

• CVE-2016-9011中 5.5The wmf_malloc function in api.c in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (application crash) via a crafted wm…
• CVE-2015-4696中 4.3Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) via a crafted WMF file to the (1…
• CVE-2015-4695中 5.0meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WMF file.
• CVE-2015-0848中 6.8Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code…
• CVE-2006-3376高 7.5Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including (1) wv, (2) abiword, (3) freetype, (4) gimp, (5) libg…