Known Vulnerabilities for products from Wvware

Listed below are 9 of the newest known vulnerabilities associated with the vendor "Wvware".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2016-9011 json The wmf_malloc function in api.c in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (application crash) v... 5.5 - MEDIUM 2017-03-23 2017-03-27
CVE-2015-4696 json Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) via a crafted WMF... 4.3 - MEDIUM 2015-07-01 2017-09-22
CVE-2015-4695 json meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WMF file. 5 - MEDIUM 2015-07-01 2017-09-22
CVE-2015-4588 json Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to cause a denial of service... 6.8 - MEDIUM 2015-07-01 2018-10-30
CVE-2015-0848 json Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute... 6.8 - MEDIUM 2015-07-01 2018-10-30
CVE-2006-4513 json Multiple integer overflows in the WV library in wvWare (formerly mswordview) before 1.2.3, as used by AbiWord, KWord, and pos... Not Provided 2006-10-28 2026-04-23
CVE-2006-3376 json Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including (1) wv, (2) abiword, (3) freetype, (4)... 7.5 - HIGH 2006-07-06 2018-10-18
CVE-2006-2197 json Integer overflow in wv2 before 0.2.3 might allow context-dependent attackers to execute arbitrary code via a crafted Microsof... Not Provided 2006-06-15 2025-04-03
CVE-2004-0645 json Buffer overflow in the wvHandleDateTimePicture function in wv library (wvWare) 0.7.4 through 0.7.6 and 1.0.0 allows remote at... Not Provided 2004-08-06 2025-04-03

Known software with vulnerabilities from Wvware

Type Vendor Product Version
ApplicationWvwareLibwmf0.2.8.4