Vulnerability Database

299,759

Total vulnerabilities in the database

CVE-2009-1364

Use-after-free vulnerability in the embedded GD library in libwmf 0.2.8.4 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted WMF file.

  • Published: May 1, 2009
  • Updated: Nov 9, 2025
  • CVE: CVE-2009-1364
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
francis_james_franklin / libwmf 0.2.8.4 0.2.8.4.x
opensuse / opensuse 13.1 13.1.x
opensuse / opensuse 13.2 13.2.x