CVE-2018-12933

Name of the Vulnerable Software and Affected Versions Wine version 3.7

Description The issue allows attackers to cause a denial of service or possibly have other impact due to an out-of-bounds write. This is because the attacker controls the pCreatePen->ihPen array index in the PlayEnhMetaFileRecord function in enhmetafile.c.

Recommendations For Wine version 3.7, consider restricting access to the PlayEnhMetaFileRecord function in enhmetafile.c to minimize the risk of exploitation. As a temporary workaround, avoid using the pCreatePen->ihPen array index in the affected function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.