CVE-2020-13999

概要

参考情報

• libemf.sourceforge.net/index.html · Product
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/555PIBSHDUZD26UCJ5DHCQ4W7RXEZC66
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVZXYNDM4YOONMXYPW2GTMIS6V6JBIL6
• sourceforge.net/p/libemf/code/HEAD/tree · Third Party Advisory
• sourceforge.net/p/libemf/news/2020/06/release-of-libemf-1013 · Third Party Advisory
• sourceforge.net/projects/libemf · Third Party Advisory

libemf のその他の脆弱性

• CVE-2020-11866高 7.8libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows a use-after-free.
• CVE-2020-11865高 7.8libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows out-of-bounds memory access.
• CVE-2020-11864中 5.5libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 2 of 2).
• CVE-2020-11863中 5.5libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 1 of 2).