rpm package
suse/libEMF&distro=SUSE Linux Enterprise Software Development Kit 12 SP5
pkg:rpm/suse/libEMF&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5
Vulnerabilities (5)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2020-13999 | Med | 5.5 | < 1.0.7-11.6.1 | 1.0.7-11.6.1 | Jun 15, 2020 | ScaleViewPortExtEx in libemf.cpp in libEMF (aka ECMA-234 Metafile Library) 1.0.12 allows an integer overflow and denial of service via a crafted EMF file. | |
| CVE-2020-11866 | Hig | 7.8 | < 1.0.7-11.3.1 | 1.0.7-11.3.1 | May 11, 2020 | libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows a use-after-free. | |
| CVE-2020-11865 | Hig | 7.8 | < 1.0.7-11.3.1 | 1.0.7-11.3.1 | May 11, 2020 | libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows out-of-bounds memory access. | |
| CVE-2020-11864 | Med | 5.5 | < 1.0.7-11.3.1 | 1.0.7-11.3.1 | May 11, 2020 | libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 2 of 2). | |
| CVE-2020-11863 | Med | 5.5 | < 1.0.7-11.3.1 | 1.0.7-11.3.1 | May 11, 2020 | libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 1 of 2). |
- affected < 1.0.7-11.6.1fixed 1.0.7-11.6.1
ScaleViewPortExtEx in libemf.cpp in libEMF (aka ECMA-234 Metafile Library) 1.0.12 allows an integer overflow and denial of service via a crafted EMF file.
- affected < 1.0.7-11.3.1fixed 1.0.7-11.3.1
libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows a use-after-free.
- affected < 1.0.7-11.3.1fixed 1.0.7-11.3.1
libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows out-of-bounds memory access.
- affected < 1.0.7-11.3.1fixed 1.0.7-11.3.1
libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 2 of 2).
- affected < 1.0.7-11.3.1fixed 1.0.7-11.3.1
libEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 1 of 2).