CVE-2016-9011

概要

参考情報

• openwall.com/lists/oss-security/2016/10/25/1 · Mailing List
• securityfocus.com/bid/93860 · Third Party Advisory
• blogs.gentoo.org/ago/2016/10/18/libwmf-memory-allocation-failure-in-wmf_malloc-api-c · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking

libwmf のその他の脆弱性

• CVE-2015-4696中 4.3Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) via a crafted WMF file to the (1…
• CVE-2015-4695中 5.0meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WMF file.
• CVE-2015-4588中 6.8Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or pos…
• CVE-2015-0848中 6.8Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code…
• CVE-2006-3376高 7.5Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including (1) wv, (2) abiword, (3) freetype, (4) gimp, (5) libg…