CVE-2009-1364

Synopsis Moderate: libwmf security update Type/Severity Security Advisory: Moderate Topic Updated libwmf packages that fix one security issue are now available forRed Hat Enterprise Linux 4 and 5This update has been rated as having moderate security impact by the RedHat Security Response Team Des ...

Debian Bug report logs - #526434 CVE-2009-1364 libwmf: embedded gd use-after-free error Package: libwmf; Maintainer for libwmf is Debian QA Group <packages@qadebianorg>; Reported by: Giuseppe Iuculano <giuseppe@iuculanoit> Date: Fri, 1 May 2009 08:21:04 UTC Severity: serious Tags: patch, security Found in versio ...

Tavis Ormandy discovered that libwmf incorrectly used memory after it had been freed when using its embedded GD library If a user or automated system were tricked into opening a crafted WMF file, an attacker could cause a denial of service or execute arbitrary code with privileges of the user invoking the program ...

Tavis Ormandy discovered that the embedded GD library copy in libwmf, a library to parse windows metafiles (WMF), makes use of a pointer after it was already freed An attacker using a crafted WMF file can cause a denial of service or possibly the execute arbitrary code via applications using this library For the oldstable distribution (etch), thi ...

Use-after-free vulnerability in the embedded GD library in libwmf 0284 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted WMF file ...