Logo
vulnerabilityCVE-2015-4696
Name
CVE-2015-4696
Source
NVD ( link)Debian ( link)
Description
Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) via a crafted WMF file to the (1) wmf2gd or (2) wmf2eps command.
CWEs
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
libwmf
Patched

Vulnerability Rating#


4.3
CVSSv2

Others affected components#


Name
Project
Project Version
Version
Status
yocto
master
0.2.13
Not Affected
yocto
scarthgap
0.2.8.4
Patched

Resolved with patches#


libwmf (yocto:kirkstone)

#
Title
Author
Resolve
1
CVE-2015-4696
=?UTF-8?q?Caol=C3=A1n=20McNamara?= <caolanm@redhat.com>
CVE-2015-4696

libwmf (yocto:scarthgap)

#
Title
Author
Resolve
1
CVE-2015-4696
=?UTF-8?q?Caol=C3=A1n=20McNamara?= <caolanm@redhat.com>
CVE-2015-4696