{"action":"Upgrade libwmf to 0.2.8.4-2 or later.","affected":[{"fixed":"0.2.8.4-2","introduced":"0"}],"component":"libwmf","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["0.2.8.4-2"],"id":"tcs_01M5N8MFWMX171AXV2XB4PWN50","modified_at":"2026-10-22T23:47:25.012312878Z","published_at":"2006-07-06T20:05:00Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2006-3376","https://security-tracker.debian.org/tracker/CVE-2006-3376"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2006-3376#Debian:13/libwmf","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2006-3376"}],"summary":"Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including (1) wv, (2) abiword, (3) freetype, (4) gimp, (5) libgsf, and (6) imagemagick allows remote attackers to execute a"}