PT-2015-4915
CVE-2015-0848
·
Published
2015-07-01
·
Updated
2025-09-03
Description by
CVSS 2.0
6.8
MediumMetricsAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
libwmf version 0.2.8.4
Description
A heap-based buffer overflow issue allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted BMP image.
Recommendations
For libwmf version 0.2.8.4, consider updating to a newer version that addresses this issue, as using a crafted BMP image could lead to a denial of service or code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾