CVE-2009-1364: francis_james_franklin libwmf
Vulnerability summary
CVE-2009-1364 is a high (CVSS 7.5) vulnerability in francis_james_franklin libwmf. EPSS estimates a 3.46% chance of exploitation in the next 30 days, higher than 89% of scored vulnerabilities.
Not severe (CVSS 7.5, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 1 · Related 1Timeline
- 01-05-2009PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Use-after-free vulnerability in the embedded GD library in libwmf 0.2.8.4 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted WMF file.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
3.46%
Chance of exploitation in the next 30 days
Percentile
89%
Versus all other CVEs
30-day change
No change 0.00 pp
From 3.46% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.
Redhat3 products
- libwmf< 0:0.2.8.3-5.8 | < 0:0.2.8.4-10.2
- libwmf-debuginfo< 0:0.2.8.3-5.8 | < 0:0.2.8.4-10.2
- libwmf-devel< 0:0.2.8.3-5.8 | < 0:0.2.8.4-10.2
Debian1 product
- libwmf< 0.2.8.4-2+etch1 | < 0.2.8.4-6+lenny1 | < 0.2.8.4-6.1
Francis_james_franklin1 product
- libwmf0.2.8.4
Opensuse1 product
- opensuseEOL13.1 | 13.2
4 vendors · 6 products
References
33 links- launchpad.net/bugs/cve/2009-1364X Refsource CONFIRM
- www.redhat.com/archives/fedora-package-announce/2009-May/msg01266.htmlVendor AdvisoryX Refsource FEDORA
- www.redhat.com/archives/fedora-package-announce/2009-May/msg01263.htmlVendor AdvisoryX Refsource FEDORA
Show all 33 references
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10959VDB EntrySignatureX Refsource OVAL
- www.redhat.com/archives/fedora-package-announce/2009-May/msg01269.htmlVendor AdvisoryX Refsource FEDORA
