CVE-2009-1364

Common Vulnerabilities and Exposures

CVE-2009-1364 at MITRE

Details

Use-after-free vulnerability in the embedded GD library in libwmf 0.2.8.4 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted WMF file.

Novell Bugzilla entry: 495842

SUSE Security Advisories:

SUSE-SR:2009:011 , published Tue, 09 Jun 2009 12:00:00 +0000

Product(s)	Fixed package version(s)	References
openSUSE 10.3	`libwmf >= 0.2.8.4-92.2` `libwmf-devel >= 0.2.8.4-92.2` `libwmf-gnome >= 0.2.8.4-92.2`	ZYPP Patch Nr: 6212 SAT Patch Nr: 821
openSUSE 11.0	`libwmf-debuginfo >= 0.2.8.4-164.2` `libwmf-debugsource >= 0.2.8.4-164.2`	ZYPP Patch Nr: 6212 SAT Patch Nr: 821
openSUSE 11.0	`libwmf >= 0.2.8.4-164.2` `libwmf-devel >= 0.2.8.4-164.2` `libwmf-gnome >= 0.2.8.4-164.2`	ZYPP Patch Nr: 6212 SAT Patch Nr: 821
openSUSE 11.1	`libwmf-debuginfo >= 0.2.8.4-206.24.3` `libwmf-debuginfo >= 0.2.8.4-206.24.4` `libwmf-debuginfo-32bit >= 0.2.8.4-206.24.4` `libwmf-debuginfo-64bit >= 0.2.8.4-206.24.3` `libwmf-debugsource >= 0.2.8.4-206.24.3` `libwmf-debugsource >= 0.2.8.4-206.24.4`	ZYPP Patch Nr: 6212 SAT Patch Nr: 821
openSUSE 11.1	`libwmf >= 0.2.8.4-206.24.3` `libwmf >= 0.2.8.4-206.24.4` `libwmf-32bit >= 0.2.8.4-206.24.4` `libwmf-64bit >= 0.2.8.4-206.24.3` `libwmf-devel >= 0.2.8.4-206.24.3` `libwmf-devel >= 0.2.8.4-206.24.4` `libwmf-gnome >= 0.2.8.4-206.24.3` `libwmf-gnome >= 0.2.8.4-206.24.4` `libwmf-gnome-32bit >= 0.2.8.4-206.24.4` `libwmf-gnome-64bit >= 0.2.8.4-206.24.3`	ZYPP Patch Nr: 6212 SAT Patch Nr: 821
Novell Linux Desktop 9 for x86 Novell Linux Desktop 9 for x86_64	`libwmf >= 0.2.8.2-88.7`	core9. x86-64 core9. s390 core9. s390x sles9-nld. x86-64 core9. x86 core9. ia64 core9. ppc sles9-nld. x86 YOU Patch Nr: 12409
SLES SDK 9 for IBM S/390 and IBM zSeries SLES SDK 9 for IBM iSeries and IBM pSeries SLES SDK 9 for IBM zSeries SLES SDK 9 for IPF SLES SDK 9 for X86-64 SLES SDK 9 for x86	`libwmf >= 0.2.8.2-88.7` `libwmf-devel >= 0.2.8.2-88.7`	core9. x86-64 core9. s390 core9. s390x sles9-nld. x86-64 core9. x86 core9. ia64 core9. ppc sles9-nld. x86 YOU Patch Nr: 12409
SLES 11 DEBUGINFO	`libwmf-debuginfo >= 0.2.8.4-206.27.4` `libwmf-debugsource >= 0.2.8.4-206.27.4`	sle11-debuginfo. x86 sle11-debuginfo. x86 sle11-debuginfo. x86-64 sle11-debuginfo. s390x sle11-debuginfo. ia64 sle11-debuginfo. x86-64 sle11-debuginfo. x86-64 sle11-debuginfo. ppc sle11-debuginfo. ia64 sle11-debuginfo. ppc sle11-debuginfo. s390x sle11-debuginfo. x86 SAT Patch Nr: 822
SLES 11 DEBUGINFO	`libwmf-debuginfo >= 0.2.8.4-206.27.4` `libwmf-debuginfo-x86 >= 0.2.8.4-206.27.4` `libwmf-debugsource >= 0.2.8.4-206.27.4`	sle11-debuginfo. x86 sle11-debuginfo. x86 sle11-debuginfo. x86-64 sle11-debuginfo. s390x sle11-debuginfo. ia64 sle11-debuginfo. x86-64 sle11-debuginfo. x86-64 sle11-debuginfo. ppc sle11-debuginfo. ia64 sle11-debuginfo. ppc sle11-debuginfo. s390x sle11-debuginfo. x86 SAT Patch Nr: 822
SLES 11 DEBUGINFO	`libwmf-debuginfo >= 0.2.8.4-206.27.4` `libwmf-debuginfo-32bit >= 0.2.8.4-206.27.4` `libwmf-debugsource >= 0.2.8.4-206.27.4`	sle11-debuginfo. x86 sle11-debuginfo. x86 sle11-debuginfo. x86-64 sle11-debuginfo. s390x sle11-debuginfo. ia64 sle11-debuginfo. x86-64 sle11-debuginfo. x86-64 sle11-debuginfo. ppc sle11-debuginfo. ia64 sle11-debuginfo. ppc sle11-debuginfo. s390x sle11-debuginfo. x86 SAT Patch Nr: 822
SLE 11	`libwmf >= 0.2.8.4-206.27.4` `libwmf-devel >= 0.2.8.4-206.27.4` `libwmf-gnome >= 0.2.8.4-206.27.4`	sle11-debuginfo. x86 sle11-debuginfo. x86 sle11-debuginfo. x86-64 sle11-debuginfo. s390x sle11-debuginfo. ia64 sle11-debuginfo. x86-64 sle11-debuginfo. x86-64 sle11-debuginfo. ppc sle11-debuginfo. ia64 sle11-debuginfo. ppc sle11-debuginfo. s390x sle11-debuginfo. x86 SAT Patch Nr: 822
SLE 11	`libwmf >= 0.2.8.4-206.27.4` `libwmf-devel >= 0.2.8.4-206.27.4` `libwmf-gnome >= 0.2.8.4-206.27.4` `libwmf-gnome-x86 >= 0.2.8.4-206.27.4` `libwmf-x86 >= 0.2.8.4-206.27.4`	sle11-debuginfo. x86 sle11-debuginfo. x86 sle11-debuginfo. x86-64 sle11-debuginfo. s390x sle11-debuginfo. ia64 sle11-debuginfo. x86-64 sle11-debuginfo. x86-64 sle11-debuginfo. ppc sle11-debuginfo. ia64 sle11-debuginfo. ppc sle11-debuginfo. s390x sle11-debuginfo. x86 SAT Patch Nr: 822
SLE 11	`libwmf >= 0.2.8.4-206.27.4` `libwmf-32bit >= 0.2.8.4-206.27.4` `libwmf-devel >= 0.2.8.4-206.27.4` `libwmf-gnome >= 0.2.8.4-206.27.4` `libwmf-gnome-32bit >= 0.2.8.4-206.27.4`	sle11-debuginfo. x86 sle11-debuginfo. x86 sle11-debuginfo. x86-64 sle11-debuginfo. s390x sle11-debuginfo. ia64 sle11-debuginfo. x86-64 sle11-debuginfo. x86-64 sle11-debuginfo. ppc sle11-debuginfo. ia64 sle11-debuginfo. ppc sle11-debuginfo. s390x sle11-debuginfo. x86 SAT Patch Nr: 822
SLED 11	`libwmf >= 0.2.8.4-206.27.4`	sle11-debuginfo. x86 sle11-debuginfo. x86 sle11-debuginfo. x86-64 sle11-debuginfo. s390x sle11-debuginfo. ia64 sle11-debuginfo. x86-64 sle11-debuginfo. x86-64 sle11-debuginfo. ppc sle11-debuginfo. ia64 sle11-debuginfo. ppc sle11-debuginfo. s390x sle11-debuginfo. x86 SAT Patch Nr: 822
SLE SDK 10 SP2 for IBM iSeries and IBM pSeries SLE SDK 10 SP2 for IBM zSeries SLE SDK 10 SP2 for IPF SLE SDK 10 SP2 for X86-64 SLE SDK 10 SP2 for x86 SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T SUSE Linux Enterprise Desktop 10 SP2 for x86	`libwmf >= 0.2.8.2-110.10` `libwmf-devel >= 0.2.8.2-110.10`	sles10-sp2-sdk. ppc sled10-sp2. x86-64 sles10-sp2-sdk. x86-64 sled10-sp2. x86 sles10-sp2-sdk. x86 sles10-sp2-sdk. s390x sles10-sp2-sdk. ia64 ZYPP Patch Nr: 6213