Approved changes feed: RSS · Atom

cpe:2.3:a:wvware:libwmf:0.2.8_.4:*:*:*:*:*:*:*

part: a version: 0.2.8_.4 update: *

VendorWvware (04c0f925-7bcd-5cd7-a44d-e8381b789246)
ProductLibwmf (f130ea86-d656-5bc3-814d-b9e2f2d2cc11)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libwmf purl2cpe 2026-06-01 10:12:33.885062
pkg:deb/ubuntu/libwmf purl2cpe 2026-06-01 10:12:33.885064
pkg:github/caolanm/libwmf purl2cpe 2026-06-01 10:12:33.885065
pkg:github/reporter123/libwmf purl2cpe 2026-06-01 10:12:33.885066
pkg:rpm/centos/libwmf purl2cpe 2026-06-01 10:12:33.885068
pkg:rpm/fedora/libwmf purl2cpe 2026-06-01 10:12:33.885069
pkg:sourceforge/wvware purl2cpe 2026-06-01 10:12:33.885070

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-3376 vulnerable 2026-06-08 04:49:09.028583 Details available
Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including (1) wv, (2) abiword, (3) freetype, (4) gimp, (5) libgsf, and (6) imagemagick allows remote attackers to execute arbitrary code via the MaxRecordSize header field in a WMF file.
Published: 2006-07-06T20:00:00.000Z
Updated: 2024-08-07T18:23:21.282Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.