suse · CVE-2015-4588

Quick triage

Priority: medium Published: 2021-05-30 13:30:52 UTC Updated: 2026-04-18 18:17:17 UTC

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2015-4588 severity moderate: SUSE including 36 source package names (libwmf, libwmf-0.2.8.4-206.29.29.1, …), 99 product×package rows across 36 product lines (SUSE Liberty Linux 7, SUSE Linux Enterprise Desktop 11 SP3, … (36 product lines)): Fixed 79, Known Not Affected 20.

Description:

Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted "run-length count" in an image in a WMF file.

cvelogic Threat Intelligence