Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2684▼ 80 respecto a la semana anterior

Críticas / altas1442▲ 302 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)64▼ 462 respecto a la semana anterior

7 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2016-9011	Modificada	Media (5.5)	2.6%	—	Wvware Libwmf	23/3/2017	17/6/2026	The wmf_malloc function in api.c in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (application crash) via a crafted wmf file, which triggers a memory allocation failure.
CVE-2015-4696	Modificada	Media (4.3)	6.0%	—	Wvware Libwmf	1/7/2015	17/6/2026	Use-after-free vulnerability in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) via a crafted WMF file to the (1) wmf2gd or (2) wmf2eps command.
CVE-2015-4695	Modificada	Media (5)	6.6%	—	Wvware Libwmf	1/7/2015	17/6/2026	meta.h in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WMF file.
CVE-2015-4588	Modificada	Media (6.8)	9.2%	—	Opensuse Wvware Libwmf Fedoraproject Fedora	1/7/2015	17/6/2026	Heap-based buffer overflow in the DecodeImage function in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted "run-length count" in an image in a WMF file.
CVE-2015-0848	Modificada	Media (6.8)	8.5%	—	Wvware Libwmf Fedoraproject Fedora Opensuse	1/7/2015	17/6/2026	Heap-based buffer overflow in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted BMP image.
CVE-2009-1364	Modificada	Alta (7.5)	3.5%	—	Francis James Franklin Libwmf Opensuse	1/5/2009	16/6/2026	Use-after-free vulnerability in the embedded GD library in libwmf 0.2.8.4 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted WMF file.
CVE-2006-3376	Modificada	Alta (7.5)	7.7%	—	Wvware Libwmf Wvware WV2	6/7/2006	16/6/2026	Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including (1) wv, (2) abiword, (3) freetype, (4) gimp, (5) libgsf, and (6) imagemagick allows remote attackers to execute arbitrary code via the MaxRecordSize header field in a WMF file.