CVE-2015-4696

概要

参考情報

• lists.fedoraproject.org/pipermail/package-announce/2015-July/162569.html
• lists.opensuse.org/opensuse-updates/2015-07/msg00018.html
• rhn.redhat.com/errata/RHSA-2015-1917.html
• debian.org/security/2015/dsa-3302
• openwall.com/lists/oss-security/2015/06/17/3
• openwall.com/lists/oss-security/2015/06/21/3
• oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
• securityfocus.com/bid/75331
• securitytracker.com/id/1032771
• ubuntu.com/usn/USN-2670-1
• bugs.debian.org/cgi-bin/bugreport.cgi · Exploit
• security.gentoo.org/glsa/201602-03

libwmf のその他の脆弱性

• CVE-2016-9011中 5.5The wmf_malloc function in api.c in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (application crash) via a crafted wm…
• CVE-2015-4695中 5.0meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WMF file.
• CVE-2015-4588中 6.8Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or pos…
• CVE-2015-0848中 6.8Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code…
• CVE-2006-3376高 7.5Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including (1) wv, (2) abiword, (3) freetype, (4) gimp, (5) libg…