CVE-2015-0848

Published: 1 July 2015

Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image.

Status

Notes

See also https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=784205

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0848
• https://marc.info/?l=oss-security&m=143314637728001&w=2
• https://ubuntu.com/security/notices/USN-2670-1
• NVD
• Launchpad
• Debian

Bugs

• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787644
• https://bugzilla.redhat.com/show_bug.cgi?id=1227243