Alerts This Week
Warning Icon 1 540
Alerts This Week
Warning Icon 1 540

Debian DSA-3302-1 Moderate: libwmf Denial of Service Risk

debian
Calendar Grey July 6, 2015
Debian Logo
Enhance libwmf to address security vulnerabilities, mitigating risks of denial of service and potential code execution threats on Debian platforms.
Insufficient input sanitising in libwmf, a library to process Windows metafile data, may result in denial of service or the execution of arbitrary code if a malformed WMF file is o...

Summary

Insufficient input sanitising in libwmf, a library to process Windows
metafile data, may result in denial of service or the execution of
arbitrary code if a malformed WMF file is opened.

For the oldstable distribution (wheezy), these problems have been fixed
in version 0.2.8.4-10.3+deb7u1.

For the stable distribution (jessie), these problems have been fixed in
version 0.2.8.4-10.3+deb8u1.

For the unstable distribution (sid), these problems will be fixed soon.

We recommend that you upgrade your libwmf packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Package: libwmf
CVE ID: CVE-2015-0848 CVE-2015-4588 CVE-2015-4695 CVE-2015-4696

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here