yocto ▾
›
scarthgap ▾
›
vulnerability
›
CVE-2015-4696
Component Overview
Vulnerability Overview
Name
CVE-2015-4696
Source
NVD (
link
)
Debian (
link
)
Description
Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) via a crafted WMF file to the (1) wmf2gd or (2) wmf2eps command.
CWEs
Published Date
Jul 1, 2015
Updated Date
Jun 17, 2026
Workaround
-
Advisories
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=784192
Exploit
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=784192
Exploit
Analysis
#
Affected Component
Analysis
libwmf
Patched
Vulnerability Rating
#
4.3
CVSSv2
Others affected components
#
Name
Project
Project Version
Version
Status
libwmf
yocto
kirkstone
0.2.8.4
Patched
libwmf
yocto
master
0.2.13
Not Affected
Resolved with patches
#
libwmf (yocto:kirkstone)
#
Title
Author
Resolve
1
CVE-2015-4696
=?UTF-8?q?Caol=C3=A1n=20McNamara?= <caolanm@redhat.com>
CVE-2015-4696
libwmf (yocto:scarthgap)
#
Title
Author
Resolve
1
CVE-2015-4696
=?UTF-8?q?Caol=C3=A1n=20McNamara?= <caolanm@redhat.com>
CVE-2015-4696