Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Use-after-free vulnerability in the embedded GD library in libwmf 0.2.8.4 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted WMF file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
libwmf库WMF图形文件解析远程代码执行漏洞
Vulnerability Description
libwmf是用于读取和转换WMF矢量图形的函数库 libwmf中所内嵌的GD图形库中存在指针使用后释放漏洞。攻击者可以创建特制的WMF文件,如果打开了该文件就会导致使用libwmf的应用程序崩溃,或以运行应用程序用户的权限执行任意代码 这个漏洞仅限于libwmf中内嵌的GD图形库,不影响gd软件包的GD图形库或使用该库的应用程序。
CVSS Information
N/A
Vulnerability Type
N/A