UbuntuUpdates.org

Package "libwmf-doc"

Name: libwmf-doc

Description:

Windows metafile documentation
Latest version: 0.2.8.4-10ubuntu1.1
Release: precise (12.04)
Level: updates
Repository: main
Head package: libwmf

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libwmf-doc"

All arch deb package
APT INSTALL

Other versions of "libwmf-doc" in Precise

Repository Area Version
base main 0.2.8.4-10ubuntu1
security main 0.2.8.4-10ubuntu1.1

Changelog

Version: 0.2.8.4-10ubuntu1.1 2015-07-09 13:07:20 UTC

  libwmf (0.2.8.4-10ubuntu1.1) precise-security; urgency=medium

  * SECURITY UPDATE: denial of service and possible code execution
    - d/p/CVE-2015-0848_CVE-2015-4588_CVE-2015-4695_CVE-2015-4696.patch:
      check bounds and handle unexpected pixel depth in src/player/meta.h,
      src/ipa/ipa.h, src/ipa/ipa/bmp.h.
    - CVE-2015-0848
    - CVE-2015-4588
    - CVE-2015-4685
    - CVE-2015-4696

 -- Marc Deslauriers Tue, 07 Jul 2015 14:41:16 -0400
CVE-2015-0848 Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a cr
CVE-2015-4588 Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly exe
CVE-2015-4695 meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WMF file.
CVE-2015-4696 Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) via a crafted WMF file to the (1) wmf2gd
CVE-2015-4685 RESERVED


About   -   Send Feedback to @ubuntu_updates