PT-2015-6631

CVE-2015-4588

Published

2015-07-01

Updated

2025-09-03

Description by

CVSS 2.0

6.8

Medium

MetricsAV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions libwmf version 0.2.8.4

Description The issue is related to a heap-based buffer overflow in the DecodeImage function, which can be triggered by a crafted "run-length count" in an image in a WMF file. This can cause a denial of service (crash) or possibly allow remote attackers to execute arbitrary code.

Recommendations For libwmf version 0.2.8.4, consider updating to a newer version that addresses this issue, as no specific fix is provided for this version.

Exploitability

Exploit

Fix

Impacts

Researchers

Fernando Muñoz

Stefan Cornelius

Vendors