CVE-2009-1364

CVE-2009-1364 is a use-after-free vulnerability in the embedded GD library within libwmf 0.2.8.4, affecting various OpenSUSE and Francis James Franklin libwmf products. This flaw allows unauthenticated, remote attackers to trigger a denial of service (application crash) or potentially execute arbitrary code through a specially crafted WMF file. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector and low attack complexity, enabling partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, readily available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.