Known Vulnerabilities for products from Wvware

Listed below are 9 of the newest known vulnerabilities associated with the vendor "Wvware".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2016-9011 The wmf_malloc function in api.c in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (application crash) v... 5.5 - MEDIUM 2017-03-23 2017-03-27
CVE-2015-4696 Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) via a crafted WMF... 4.3 - MEDIUM 2015-07-01 2017-09-22
CVE-2015-4695 meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WMF file. 5 - MEDIUM 2015-07-01 2017-09-22
CVE-2015-4588 Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to cause a denial of service... 6.8 - MEDIUM 2015-07-01 2018-10-30
CVE-2015-0848 Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute... 6.8 - MEDIUM 2015-07-01 2018-10-30
CVE-2006-4513 Multiple integer overflows in the WV library in wvWare (formerly mswordview) before 1.2.3, as used by AbiWord, KWord, and pos... 5.1 - MEDIUM 2006-10-28 2017-07-20
CVE-2006-3376 Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including (1) wv, (2) abiword, (3) freetype, (4)... 7.5 - HIGH 2006-07-06 2018-10-18
CVE-2006-2197 Integer overflow in wv2 before 0.2.3 might allow context-dependent attackers to execute arbitrary code via a crafted Microsof... 6.5 - MEDIUM 2006-06-15 2018-10-03
CVE-2004-0645 Buffer overflow in the wvHandleDateTimePicture function in wv library (wvWare) 0.7.4 through 0.7.6 and 1.0.0 allows remote at... 10 - HIGH 2004-08-06 2017-07-11

Known software with vulnerabilities from Wvware

Type Vendor Product Version
ApplicationWvwareLibwmf0.2.8.4