Use-after-free error in libwmf - CVE-2015-4696

Vulnerability identifier: #VU12352

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2015-4696

CWE-ID: CWE-416

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists due to use-after-free error. A remote attacker can trick the victim into opening a specially crafted WMF file to the (1) wmf2gd or (2) wmf2eps command, trigger memory corruption and cause the service to crash.

libwmf
Debian Linux
Gentoo Linux
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux EUS Compute Node
Ubuntu
Slackware Linux
Fedora
libwmf

Install update from vendor's website.

libwmf - addressed in versions 0.2.8.4-45.fc21, 0.2.8.4-45.fc22, 0.2.8.4-46.fc21, 0.2.8.4-46.fc22, 0.2.8.4-46.fc23

• https://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html

• Ubuntu update for libwmf
• Debian update for libwmf
• Gentoo update for libwmf
• Slackware Linux update for libwmf
• Red Hat update for libwmf
• Fedora 22 update for libwmf
• Fedora 21 update for libwmf
• Fedora 23 update for libwmf
• Fedora 22 update for libwmf
• Fedora 21 update for libwmf