CVEvulnerability

CVE-2006-3376

7.5 HIGH Published 2006-07-06 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-07-06
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including (1) wv, (2) abiword, (3) freetype, (4) gimp, (5) libgsf, and (6) imagemagick allows remote attackers to execute arbitrary code via the MaxRecordSize header field in a WMF file.

Affected configurations

• wvware libwmf 0.2.8 .4 • wvware wv2 0.2.1 • wvware wv2 0.2.2 • wvware wv2 0.2.3

References