CVE-2016-9011
CVE-2016-9011
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The wmf_malloc function in api.c in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (application crash) via a crafted wmf file, which triggers a memory allocation failure.
CVSS 5.5 · Medium · EPSS 2.7% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
libwmf Debian:12
- Affected ranges
- ECOSYSTEM: < 0.2.8.4-10.6
Update to 0.2.8.4-10.6
libwmf Debian:13
- Affected ranges
- ECOSYSTEM: < 0.2.8.4-10.6
Update to 0.2.8.4-10.6
libwmf Debian:14
- Affected ranges
- ECOSYSTEM: < 0.2.8.4-10.6
Update to 0.2.8.4-10.6
libwmf Ubuntu:16.04:LTS
- Versions
- 0.2.8.4-10.3ubuntu2
- 0.2.8.4-10.4ubuntu1
- 0.2.8.4-10.5ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published