CVE-2009-1364
- State
- Published
- Severity
- Not scored
- Published
- May 1, 2009
- Updated
- Aug 7, 2024
- Reserved
- Apr 22, 2009
Description
Use-after-free vulnerability in the embedded GD library in libwmf 0.2.8.4 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted WMF file.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- RHSA-2009:0457vendor-advisory
- 34964third-party-advisory
- 35001third-party-advisory
- 35190third-party-advisory
- https://launchpad.net/bugs/cve/2009-1364
- openSUSE-SU-2015:1132vendor-advisory
- FEDORA-2009-5524vendor-advisory
- SUSE-SR:2009:011vendor-advisory
- FEDORA-2009-5518vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=496864
- http://wvware.cvs.sourceforge.net/viewvc/wvware/libwmf2/src/extra/Makefile.am?hideattic=0&view=log
- openSUSE-SU-2015:1134vendor-advisory
- 35686third-party-advisory
- 1022154vdb-entry
- 34901third-party-advisory
- oval:org.mitre.oval:def:10959vdb-entrysignature
- GLSA-200907-01vendor-advisory
- 35416third-party-advisory
- FEDORA-2009-5517vendor-advisory
- DSA-1796vendor-advisory
- 34792vdb-entry
- libwmf-gdlibrary-code-execution(50290)vdb-entry
- 35025third-party-advisory
- USN-769-1vendor-advisory
- MDVSA-2009:106vendor-advisory
- ADV-2009-1228vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.