CVE-2015-0848: Buffer Overflow
A heap buffer overflow flaw was found in the way the libwmf library processed WMF files containing BMP images. A specially crafted WMF file could cause an application using libwmf to crash or, possibly, execute arbitrary code.
Original report:
http://seclists.org/oss-sec/2015/q2/597
Other sources
Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-0848?
The severity of CVE-2015-0848 is considered high due to the potential for remote code execution.
How do I fix CVE-2015-0848?
To mitigate CVE-2015-0848, upgrade to a version of libwmf that is not affected, such as 0.2.8.4-18 or newer.
What applications are affected by CVE-2015-0848?
Applications using vulnerable versions of the libwmf library to process WMF files containing BMP images are affected by CVE-2015-0848.
Can CVE-2015-0848 be exploited remotely?
Yes, CVE-2015-0848 can be exploited remotely if a user opens a specially crafted WMF file.
Is CVE-2015-0848 specific to any operating system?
CVE-2015-0848 affects multiple operating systems that utilize the vulnerable versions of the libwmf library, including Debian, Fedora, and openSUSE.