PatchTheCVElibwmf vulnerabilities and fixes
Recent CVEs affecting libwmf, with upgrade or downgrade steps. 5 tracked.
libwmf has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-03-23. Highest priority: CVE-2015-4588 (score 53/100).
- CVE-2016-9011 MEDIUM 5.5 DOWNGRADE The wmf_malloc function in api.c in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (appli
- CVE-2015-4696 MEDIUM 4.3 DOWNGRADE Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) vi
- CVE-2015-4695 MEDIUM 5.0 DOWNGRADE meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a craft
- CVE-2015-4588 MEDIUM 6.8 MITIGATE DOWNGRADE Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to cause a de
- CVE-2015-0848 MEDIUM 6.8 DOWNGRADE MITIGATE Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or p
FAQ
How do I fix libwmf vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is libwmf being exploited right now?
None of the tracked libwmf CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which libwmf CVE should I patch first?
CVE-2015-4588 currently ranks highest (53/100): Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to cause a de.