CVE-2016-9011
Published: 23 March 2017
The wmf_malloc function in api.c in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (application crash) via a crafted wmf file, which triggers a memory allocation failure.
Notes
| Author | Note |
|---|---|
| leosilva | debian fixed that with the debian proposed patch. |
Priority
Status
| Package | Release | Status |
|---|---|---|
|
libwmf Launchpad, Ubuntu, Debian |
artful |
Ignored
(end of life)
|
| bionic |
Not vulnerable
(0.2.8.4-12)
|
|
| cosmic |
Not vulnerable
(0.2.8.4-12)
|
|
| disco |
Not vulnerable
(0.2.8.4-12)
|
|
| eoan |
Not vulnerable
(0.2.8.4-12)
|
|
| focal |
Not vulnerable
(0.2.8.4-12)
|
|
| groovy |
Not vulnerable
(0.2.8.4-12)
|
|
| hirsute |
Not vulnerable
(0.2.8.4-12)
|
|
| impish |
Not vulnerable
(0.2.8.4-12)
|
|
| jammy |
Not vulnerable
(0.2.8.4-12)
|
|
| kinetic |
Not vulnerable
(0.2.8.4-12)
|
|
| lunar |
Not vulnerable
(0.2.8.4-12)
|
|
| mantic |
Not vulnerable
(0.2.8.4-12)
|
|
| noble |
Not vulnerable
(0.2.8.4-12)
|
|
| precise |
Ignored
(end of life)
|
|
| trusty |
Does not exist
(trusty was needed)
|
|
| upstream |
Released
(0.2.8.4-10.6)
|
|
| xenial |
Needed
|
|
| yakkety |
Ignored
(end of life)
|
|
| zesty |
Ignored
(end of life)
|
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score | 5.5 |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges required | None |
| User interaction | Required |
| Scope | Unchanged |
| Confidentiality | None |
| Integrity impact | None |
| Availability impact | High |
| Vector | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
References
- http://www.openwall.com/lists/oss-security/2016/10/18/9
- https://blogs.gentoo.org/ago/2016/10/18/libwmf-memory-allocation-failure-in-wmf_malloc-api-c
- https://github.com/asarubbo/poc/blob/master/00015-libwmf-memalloc-wmf_malloc (reproducer)
- https://bugs.debian.org/cgi-bin/bugreport.cgi?att=1;bug=842090;filename=libwmf-0.2.8.4-CVE-2016-9011-debian.patch;msg=10
- https://www.cve.org/CVERecord?id=CVE-2016-9011
- NVD
- Launchpad
- Debian