cve/2015/CVE-2015-4696.md

CVE-2015-4696

Description

Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) via a crafted WMF file to the (1) wmf2gd or (2) wmf2eps command.

POC

Reference

• http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html

Github

• https://github.com/andir/nixos-issue-db-example
• https://github.com/mrash/afl-cve