CVE-2015-4695: Buffer Overflow
Published May 4, 2015
·Updated
meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WMF file.
Affected Software
2 affected componentsFixes available
debian/libwmf
0.2.8.4-170.2.12-5.10.2.13-1.1
wvWare Libwmf=0.2.8.4
Event History
May 4, 2015
Data Sourced
via Debian·01:24 AM
SeverityAffected Software
Jul 1, 2015
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-4695?
CVE-2015-4695 has been classified as a high severity vulnerability due to its potential to cause denial of service through out-of-bounds read.
2
How do I fix CVE-2015-4695?
To fix CVE-2015-4695, upgrade to a version of libwmf that is higher than 0.2.8.4, such as 0.2.12 or later.
3
What types of attacks are possible with CVE-2015-4695?
CVE-2015-4695 can be exploited by remote attackers to trigger a denial of service condition through specially crafted WMF files.
4
Which versions of libwmf are affected by CVE-2015-4695?
Versions 0.2.8.4 and below of libwmf are affected by CVE-2015-4695.
5
Is CVE-2015-4695 easily weaponizable?
Yes, CVE-2015-4695 can be weaponized easily by creating malicious WMF files to exploit the out-of-bounds read vulnerability.