libwmf-0.2.8.4-41.el7

エラータID: AXSA:2015-512:01

Release date: 
Tuesday, October 20, 2015 - 23:06
Subject: 
libwmf-0.2.8.4-41.el7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
High
Description: 

A library for reading and converting Windows MetaFile vector graphics (WMF).

Security issues fixed with this release:

CVE-2015-0848
Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers
to cause a denial of service (crash) or possibly execute arbitrary
code via a crafted BMP image.
CVE-2015-4588
Heap-based buffer overflow in the DecodeImage function in libwmf
0.2.8.4 allows remote attackers to cause a denial of service (crash)
or possibly execute arbitrary code via a crafted "run-length count" in
an image in a WMF file.
CVE-2015-4695
meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of
service (out-of-bounds read) via a crafted WMF file.
CVE-2015-4696
Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers
to cause a denial of service (crash) via a crafted WMF file to the (1)
wmf2gd or (2) wmf2eps command.

Solution: 

Update packages.

CVEs: 
CVE-2015-0848
Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image.
CVE-2015-4588
Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted "run-length count" in an image in a WMF file.
CVE-2015-4695
meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WMF file.
CVE-2015-4696
Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) via a crafted WMF file to the (1) wmf2gd or (2) wmf2eps command.
Additional Info: 

N/A

Download: 

SRPMS
  1. libwmf-0.2.8.4-41.el7.src.rpm
    MD5: 087ea6f9e96822aec59e0180fb32e288
    SHA-256: 980836471d077f831073c9809420817b4ce4aa040ea352efd09a8e91ba49c5a1
    Size: 2.11 MB

Asianux Server 7 for x86_64
  1. libwmf-0.2.8.4-41.el7.x86_64.rpm
    MD5: 70dab2174cfa36097e3ce85152163243
    SHA-256: 64a63cc48fd4bc21fc8d57d9cb43c2508a57967570df6d2916c860fb51bf787a
    Size: 133.57 kB
  2. libwmf-lite-0.2.8.4-41.el7.x86_64.rpm
    MD5: 5bf3f2e4c6098847dfe8867435ed6296
    SHA-256: 8b9490408c9e931df5eafbeac6dca496625e9e6fec01bd71137f067fdd136a1c
    Size: 64.92 kB
  3. libwmf-0.2.8.4-41.el7.i686.rpm
    MD5: 3be7b65611c2b022f685614affe5bbcd
    SHA-256: d8222aea0e0ae8203a6fa8366a926c5a977660d5ae05f124db3974eb52d93b66
    Size: 134.17 kB
  4. libwmf-lite-0.2.8.4-41.el7.i686.rpm
    MD5: 220f4d3500c14f1a07d312fe9adc8479
    SHA-256: 295ca0cf2a0cb55bb982ccd69edb4e540a2b5bd489d48744432fd1ff2e3dda49
    Size: 66.67 kB