Out-of-bounds read in libwmf - CVE-2015-4695

Vulnerability identifier: #VU12351

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2015-4695

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists in the DecodeImage function due to out-of-bounds read. A remote attacker can trigger memory corruption and cause the service to crash via a specially crafted WMF file.

libwmf
Debian Linux
Gentoo Linux
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux EUS Compute Node
Ubuntu
Slackware Linux
Fedora
libwmf

Install update from vendor's website.

libwmf - addressed in versions 0.2.8.4-45.fc21, 0.2.8.4-45.fc22

• https://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html

• Ubuntu update for libwmf
• Debian update for libwmf
• Gentoo update for libwmf
• Slackware Linux update for libwmf
• Red Hat update for libwmf
• Fedora 22 update for libwmf
• Fedora 21 update for libwmf