Approved changes feed: RSS · Atom

cpe:2.3:a:wvware:libwmf:0.2.8.4:*:*:*:*:*:*:*

part: a version: 0.2.8.4 update: *

VendorWvware (04c0f925-7bcd-5cd7-a44d-e8381b789246)
ProductLibwmf (f130ea86-d656-5bc3-814d-b9e2f2d2cc11)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libwmf purl2cpe 2026-06-01 10:12:33.882294
pkg:deb/ubuntu/libwmf purl2cpe 2026-06-01 10:12:33.882297
pkg:github/caolanm/libwmf purl2cpe 2026-06-01 10:12:33.882300
pkg:github/reporter123/libwmf purl2cpe 2026-06-01 10:12:33.882303
pkg:rpm/centos/libwmf purl2cpe 2026-06-01 10:12:33.882306
pkg:rpm/fedora/libwmf purl2cpe 2026-06-01 10:12:33.882308
pkg:sourceforge/wvware purl2cpe 2026-06-01 10:12:33.882311

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-9011 vulnerable 2026-06-08 05:08:22.392927 Details available
The wmf_malloc function in api.c in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (application crash) via a crafted wmf file, which triggers a memory allocation failure.
Published: 2017-03-23T18:00:00.000Z
Updated: 2024-08-06T02:35:02.326Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4696 vulnerable 2026-06-08 05:06:40.456916 Details available
Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) via a crafted WMF file to the (1) wmf2gd or (2) wmf2eps command.
Published: 2015-07-01T14:00:00.000Z
Updated: 2024-08-06T06:25:20.201Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4695 vulnerable 2026-06-08 05:06:40.456486 Details available
meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WMF file.
Published: 2015-07-01T14:00:00.000Z
Updated: 2024-08-06T06:25:20.178Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4588 vulnerable 2026-06-08 05:06:40.208598 Details available
Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted "run-length count" in an image in a WMF file.
Published: 2015-07-01T14:00:00.000Z
Updated: 2024-08-06T06:18:12.108Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0848 vulnerable 2026-06-08 05:06:24.076036 Details available
Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image.
Published: 2015-07-01T14:00:00.000Z
Updated: 2024-08-06T04:26:11.261Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.