PT-2015-6631
CVE-2015-4588
·
Publicado
2015-07-01
·
Atualizado
2025-09-03
Descrição por
CVSS 2.0
6.8
MédiaMétricasAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
libwmf version 0.2.8.4
Description
The issue is related to a heap-based buffer overflow in the DecodeImage function, which can be triggered by a crafted "run-length count" in an image in a WMF file. This can cause a denial of service (crash) or possibly allow remote attackers to execute arbitrary code.
Recommendations
For libwmf version 0.2.8.4, consider updating to a newer version that addresses this issue, as no specific fix is provided for this version.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾