CVE-2006-3376: Wvware Libwmf

High severity, CVSS 7.5. EPSS: 7.7% chance of exploitation in the next 30 days.

Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including (1) wv, (2) abiword, (3) freetype, (4) gimp, (5) libgsf, and (6) imagemagick allows remote attackers to execute arbitrary code via the MaxRecordSize header field in a WMF file.

Affected products

• Wvware Libwmf: version 0.2.8_.4 only
• Wvware WV2: version 0.2.1 only; version 0.2.2 only; version 0.2.3 only

Published 2006-07-06. Last modified 2026-06-16.