Content-Type: |
text/plain; charset="utf-8" |
Date: |
Tue, 20 Oct 2015 18:35:37 +0000 |
Reply-To: |
|
Subject: |
|
MIME-Version: |
1.0 |
Message-ID: |
|
Content-Transfer-Encoding: |
7bit |
Sender: |
|
From: |
|
Parts/Attachments: |
|
|
Synopsis: Important: libwmf security update
Advisory ID: SLSA-2015:1917-1
Issue Date: 2015-10-20
CVE Numbers: CVE-2015-0848
CVE-2015-4695
CVE-2015-4696
CVE-2015-4588
--
It was discovered that libwmf did not correctly process certain WMF
(Windows Metafiles) with embedded BMP images. By tricking a victim into
opening a specially crafted WMF file in an application using libwmf, a
remote attacker could possibly use this flaw to execute arbitrary code
with the privileges of the user running the application. (CVE-2015-0848,
CVE-2015-4588)
It was discovered that libwmf did not properly process certain WMF files.
By tricking a victim into opening a specially crafted WMF file in an
application using libwmf, a remote attacker could possibly exploit this
flaw to cause a crash or execute arbitrary code with the privileges of the
user running the application. (CVE-2015-4696)
It was discovered that libwmf did not properly process certain WMF files.
By tricking a victim into opening a specially crafted WMF file in an
application using libwmf, a remote attacker could possibly exploit this
flaw to cause a crash. (CVE-2015-4695)
After installing the update, all applications using libwmf must be
restarted for the update to take effect.
--
SL6
x86_64
libwmf-0.2.8.4-25.el6_7.i686.rpm
libwmf-0.2.8.4-25.el6_7.x86_64.rpm
libwmf-debuginfo-0.2.8.4-25.el6_7.i686.rpm
libwmf-debuginfo-0.2.8.4-25.el6_7.x86_64.rpm
libwmf-lite-0.2.8.4-25.el6_7.i686.rpm
libwmf-lite-0.2.8.4-25.el6_7.x86_64.rpm
libwmf-devel-0.2.8.4-25.el6_7.i686.rpm
libwmf-devel-0.2.8.4-25.el6_7.x86_64.rpm
i386
libwmf-0.2.8.4-25.el6_7.i686.rpm
libwmf-debuginfo-0.2.8.4-25.el6_7.i686.rpm
libwmf-lite-0.2.8.4-25.el6_7.i686.rpm
libwmf-devel-0.2.8.4-25.el6_7.i686.rpm
SL7
x86_64
libwmf-0.2.8.4-41.el7_1.i686.rpm
libwmf-0.2.8.4-41.el7_1.x86_64.rpm
libwmf-debuginfo-0.2.8.4-41.el7_1.i686.rpm
libwmf-debuginfo-0.2.8.4-41.el7_1.x86_64.rpm
libwmf-lite-0.2.8.4-41.el7_1.i686.rpm
libwmf-lite-0.2.8.4-41.el7_1.x86_64.rpm
libwmf-devel-0.2.8.4-41.el7_1.i686.rpm
libwmf-devel-0.2.8.4-41.el7_1.x86_64.rpm
- Scientific Linux Development Team
|
|
|