Wvware
9 CVEs across 3 Wvware products. Browse Wvware vulnerabilities, severities, and proof-of-concept exploits.
Wvware products with known CVEs
Wvware CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2016-9011 | Medium | 5.5 | 2017-03-23 | The wmf_malloc function in api.c in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (application crash) via a crafted wmf file, which trigg… |
CVE-2015-4696 | | | 2015-07-01 | Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) via a crafted WMF file to the (1) wmf2gd or (2) wmf… |
CVE-2015-4695 | | | 2015-07-01 | meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WMF file. |
CVE-2015-4588 | | | 2015-07-01 | Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbit… |
CVE-2015-0848 | | | 2015-07-01 | Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP… |
CVE-2006-4513 | | | 2006-10-28 | Multiple integer overflows in the WV library in wvWare (formerly mswordview) before 1.2.3, as used by AbiWord, KWord, and possibly other products, allow user-a… |
CVE-2006-3376 | | | 2006-07-06 | Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including (1) wv, (2) abiword, (3) freetype, (4) gimp, (5) libgsf, and (6) imagema… |
CVE-2006-2197 | | | 2006-06-15 | Integer overflow in wv2 before 0.2.3 might allow context-dependent attackers to execute arbitrary code via a crafted Microsoft Word document. |
CVE-2004-0645 | | | 2004-08-06 | Buffer overflow in the wvHandleDateTimePicture function in wv library (wvWare) 0.7.4 through 0.7.6 and 1.0.0 allows remote attackers to execute arbitrary code… |