CVE-2015-4696: Use After Free
Published May 3, 2015
·Updated
Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) via a crafted WMF file to the (1) wmf2gd or (2) wmf2eps command.
Affected Software
2 affected componentsFixes available
debian/libwmf
0.2.8.4-170.2.12-5.10.2.13-1.1
wvWare Libwmf=0.2.8.4
Event History
May 3, 2015
Data Sourced
via Debian·10:57 PM
SeverityAffected Software
Jul 1, 2015
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-4696?
CVE-2015-4696 is classified as a high severity vulnerability due to its potential to cause denial of service.
2
How do I fix CVE-2015-4696?
To resolve CVE-2015-4696, users should upgrade to a patched version of libwmf, specifically versions later than 0.2.13-1.1.
3
What products are affected by CVE-2015-4696?
CVE-2015-4696 affects libwmf versions 0.2.8.4 through 0.2.13-1.1.
4
What type of vulnerability is CVE-2015-4696?
CVE-2015-4696 is a use-after-free vulnerability which can lead to application crashes.
5
Can exploit of CVE-2015-4696 be conducted remotely?
Yes, the exploit of CVE-2015-4696 can be conducted remotely using a crafted WMF file.